NetSight
IP …
high7.5

CVE-2016-6304

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (m…

Impact

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 1.0.2, 1.0.2a, 1.0.2b, 1.0.2c, 1.0.2d, 1.0.2e
NodejsNode.Js
from 0.10.0 before 0.10.47
from 0.12.0 before 0.12.16
from 4.0.0 before 4.6.0
from 6.0.0 before 6.7.0
NovellSuse Linux Enterprise Module For Web Scripting
Version 12.0

Weakness classification

CWE-401

References