The vulnerability of the statem/statem.cc component in the OpenSSL library allows a attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

🗓️ 26 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Use-after-free in OpenSSL statem/statem.cc may leak data, crash services, or compromise TLS sessions.

Reporter	Title	Published	Views	Family All 64
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool.	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Workload Scheduler	17 Jun 201815:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM PureApplication System.	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM Cognos Controller	15 Jun 201822:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM InfoSphere Master Data Management	27 Apr 202209:58	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL Security Advisory [22 Sep 2016] and [26 Sep 2016] affects IBM Cisco SAN switches and directors.	11 Apr 202215:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Rational Reporting for Development Intelligence	17 Jun 201805:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2016Q4 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Controller (CVE-2016-6304, CVE-2016-6303, CVE-2016-6308, CVE-2016-2181, CVE-2016-6309, CVE-2016-7052 )	16 Jun 201821:49	–	ibm

Vulners

Node

openssl opensslRange<1.1.0a

Source	Link
openssl	www.openssl.org/news/secadv/20160926.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6309
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-6309
web	www.web.nvd.nist.gov/view/vuln/detail

26 Jun 2020 00:00Current

8High risk

Vulners AI Score8

CVSS 39.8

CVSS 210

EPSS0.70223

OpenSSL Use after free Statem component Memory vulnerability Transport layer security