The vulnerability of the statem/statemdtls.c component in the OpenSSL library, which allows a hacker to cause a service failure.

🗓️ 26 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

OpenSSL statem dtls vulnerability allows service disruption from crafted message due to mismanagement.

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Workload Scheduler	17 Jun 201815:32	–	ibm
IBM Security Bulletins	Security Bulletin: September 2016 OpenSSL Vulnerabilities affect Multiple N series Products	15 Dec 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Aspera Orchestrator, IBM Aspera Virtual Catcher, IBM Aspera Faspex, IBM Aspera Shares (CVE-2016-6304, CVE-2016-2177, ...)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM Cognos Controller	15 Jun 201822:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Cloud Manager	8 Aug 201804:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM InfoSphere Master Data Management	27 Apr 202209:58	–	ibm

Vulners

Node

openssl opensslRange<1.1.0

Source	Link
openssl	www.openssl.org/news/secadv/20160922.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6308
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-6308
web	www.web.nvd.nist.gov/view/vuln/detail

26 Jun 2020 00:00Current

7High risk

Vulners AI Score7

CVSS 35.9

CVSS 27.1

EPSS0.14067

OpenSSL library statem component datagram security resource mismanagement service disruption