CVE - CVE-2016-6306

CVE-ID
CVE-2016-6306	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:93153 URL:http://www.securityfocus.com/bid/93153 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 CONFIRM:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en CONFIRM:https://bto.bluecoat.com/security-advisory/sa132 CONFIRM:https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf CONFIRM:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448 CONFIRM:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10215 CONFIRM:https://support.f5.com/csp/article/K90492697 CONFIRM:https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us CONFIRM:https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us CONFIRM:https://www.tenable.com/security/tns-2016-16 CONFIRM:https://www.tenable.com/security/tns-2016-20 CONFIRM:https://www.tenable.com/security/tns-2016-21 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 URL:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21995039 URL:http://www-01.ibm.com/support/docview.wss?uid=swg21995039 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html URL:http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html URL:http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html URL:http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html URL:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html URL:http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html URL:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html URL:http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html CONFIRM:https://bto.bluecoat.com/security-advisory/sa132 URL:https://bto.bluecoat.com/security-advisory/sa132 CONFIRM:https://git.openssl.org/?p=openssl.git;a=commit;h=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9 URL:https://git.openssl.org/?p=openssl.git;a=commit;h=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448 URL:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448 CONFIRM:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 URL:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 CONFIRM:https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ URL:https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ CONFIRM:https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us URL:https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us CONFIRM:https://www.openssl.org/news/secadv/20160922.txt URL:https://www.openssl.org/news/secadv/20160922.txt CONFIRM:https://www.tenable.com/security/tns-2016-16 URL:https://www.tenable.com/security/tns-2016-16 CONFIRM:https://www.tenable.com/security/tns-2016-20 URL:https://www.tenable.com/security/tns-2016-20 CONFIRM:https://www.tenable.com/security/tns-2016-21 URL:https://www.tenable.com/security/tns-2016-21 DEBIAN:DSA-3673 URL:http://www.debian.org/security/2016/dsa-3673 FREEBSD:FreeBSD-SA-16:26 URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc FULLDISC:20170717 Orion Elite Hidden IP Browser Pro - All Versions - Multiple Known Vulnerabilities URL:http://seclists.org/fulldisclosure/2017/Jul/31 GENTOO:GLSA-201612-16 URL:https://security.gentoo.org/glsa/201612-16 MISC:https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24 MISC:https://www.oracle.com/security-alerts/cpuapr2020.html URL:https://www.oracle.com/security-alerts/cpuapr2020.html MISC:https://www.oracle.com/security-alerts/cpujan2020.html URL:https://www.oracle.com/security-alerts/cpujan2020.html MISC:https://www.oracle.com/security-alerts/cpujul2020.html URL:https://www.oracle.com/security-alerts/cpujul2020.html MISC:https://www.oracle.com/security-alerts/cpuoct2020.html URL:https://www.oracle.com/security-alerts/cpuoct2020.html MISC:https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html URL:https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html REDHAT:RHSA-2016:1940 URL:http://rhn.redhat.com/errata/RHSA-2016-1940.html REDHAT:RHSA-2018:2185 URL:https://access.redhat.com/errata/RHSA-2018:2185 REDHAT:RHSA-2018:2186 URL:https://access.redhat.com/errata/RHSA-2018:2186 REDHAT:RHSA-2018:2187 URL:https://access.redhat.com/errata/RHSA-2018:2187 SECTRACK:1036885 URL:http://www.securitytracker.com/id/1036885 SUSE:SUSE-SU-2016:2387 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html SUSE:SUSE-SU-2016:2394 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html SUSE:SUSE-SU-2016:2458 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html SUSE:SUSE-SU-2016:2468 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html SUSE:SUSE-SU-2016:2469 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html SUSE:SUSE-SU-2016:2470 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html SUSE:SUSE-SU-2017:2699 URL:http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html SUSE:SUSE-SU-2017:2700 URL:http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html SUSE:openSUSE-SU-2016:2391 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html SUSE:openSUSE-SU-2016:2407 URL:http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html SUSE:openSUSE-SU-2016:2496 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html SUSE:openSUSE-SU-2016:2537 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html SUSE:openSUSE-SU-2018:0458 URL:http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html UBUNTU:USN-3087-1 URL:http://www.ubuntu.com/usn/USN-3087-1 UBUNTU:USN-3087-2 URL:http://www.ubuntu.com/usn/USN-3087-2
Assigning CNA
Red Hat, Inc.
Date Record Created
20160726	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20160726)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)