CVE-2016-6306

MEDIUM severity · CVSS 5.9 · Out-of-bounds read

5.9CVSS MEDIUM

Summary

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

Impact & exploitability

Attack vectorNetwork

Attack complexityHigh

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)9%

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products we track (4)

Node.js OpenSSL Ubuntu Debian

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.htmlAdvisory