CVE-2016-6308
Medium · 5.9CVSS
5.9
EPSS
12.2%
Published
Sep 26, 2016
CISA due date
—
The record
statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:5 | kmod-vboxadditions | 0 | 5.1.10-1.1.mga5 |
| Mageia:5 | kmod-virtualbox | 0 | 5.1.10-1.1.mga5 |
| Mageia:5 | virtualbox | 0 | 5.1.10-1.1.mga5 |
Related vulnerabilities
- CVE-2017-5754 Systems with microprocessors utilizing speculative execution and indirect branch… Also affects kmod-vboxadditions
- CVE-2017-5753 Systems with microprocessors utilizing speculative execution and branch prediction may… Also affects kmod-vboxadditions
- CVE-2017-1000410 The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the… Also affects kmod-vboxadditions
- CVE-2017-15115 The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does… Also affects kmod-vboxadditions
- CVE-2017-13080 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key… Also affects kmod-vboxadditions
- CVE-2017-15265 Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users… Also affects kmod-vboxadditions
- CVE-2017-1000112 Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. Also affects kmod-vboxadditions
- CVE-2017-1000252 The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a… Also affects kmod-vboxadditions