UpHeron
All vulnerabilities

Servers and applications

CVE-2016-6307

The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.

Severity
Medium 5.9
Published
26 Sept 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-6307
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-6307