Open mend-bolt-for-github[bot] opened 1 year ago
TLS/SSL and crypto library
Library home page: https://github.com/openssl/openssl.git
Found in HEAD commit: 324810317981b91bee177f96efc4d7b59e34525c
Found in base branch: master
/ssl/t1_lib.c
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
Publish Date: 2016-09-16
URL: CVE-2016-6302
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Type: Upgrade version
Origin: https://gitlab.alpinelinux.org/alpine/aports/issues/6175
Release Date: 2016-09-16
Fix Resolution: 1.1.0
Step up your Open Source Security Game with Mend here
CVE-2016-6302 - High Severity Vulnerability
TLS/SSL and crypto library
Library home page: https://github.com/openssl/openssl.git
Found in HEAD commit: 324810317981b91bee177f96efc4d7b59e34525c
Found in base branch: master
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
Publish Date: 2016-09-16
URL: CVE-2016-6302
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://gitlab.alpinelinux.org/alpine/aports/issues/6175
Release Date: 2016-09-16
Fix Resolution: 1.1.0
Step up your Open Source Security Game with Mend here