CVE-2016-6307
Medium · 5.9CVSS
5.9
EPSS
13.8%
Published
Sep 26, 2016
CISA due date
—
The record
The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:5 | kmod-vboxadditions | 0 | 5.1.10-1.1.mga5 |
| Mageia:5 | kmod-virtualbox | 0 | 5.1.10-1.1.mga5 |
| Mageia:5 | virtualbox | 0 | 5.1.10-1.1.mga5 |
Related vulnerabilities
- CVE-2017-5754 Systems with microprocessors utilizing speculative execution and indirect branch… Also affects kmod-vboxadditions
- CVE-2017-5753 Systems with microprocessors utilizing speculative execution and branch prediction may… Also affects kmod-vboxadditions
- CVE-2017-1000410 The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the… Also affects kmod-vboxadditions
- CVE-2017-15115 The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does… Also affects kmod-vboxadditions
- CVE-2017-13080 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key… Also affects kmod-vboxadditions
- CVE-2017-15265 Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users… Also affects kmod-vboxadditions
- CVE-2017-1000112 Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. Also affects kmod-vboxadditions
- CVE-2017-1000252 The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a… Also affects kmod-vboxadditions