crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

References

bugzilla.redhat.com/show_bug.cgi?id=1379310

www.openssl.org/news/secadv/20160926.txt

archlinux 2

alpinelinux 1

f5 2

cve 1

slackware 1

openssl 1

openvas 14

prion 1

nessus 19

ubuntucve 1

freebsd_advisory 1

debiancve 1

freebsd 1

threatpost 1

ibm 25

suse 4

fedora 3

aix 1

gentoo 1

symantec 1

cisco 1

huawei 1

nodejsblog 1

mageia 1

packetstorm 1

oracle 7

archlinux

[ASA-201609-30] openssl: denial of service

2016-09-28 00:00:00

[ASA-201609-28] lib32-openssl: denial of service

2016-09-27 00:00:00

alpinelinux

CVE-2016-7052

2016-09-26 19:59:00

SOL39272405 - OpenSSL vulnerability CVE-2016-7052

2016-10-10 00:00:00

K39272405 : OpenSSL vulnerability CVE-2016-7052

2016-10-10 00:00:00

cve

CVE-2016-7052

2016-09-26 19:59:00

slackware

[slackware-security] openssl

2016-09-26 18:59:48

openssl

Vulnerability in OpenSSL CVE-2016-7052

2016-09-26 00:00:00

openvas

Slackware: Security Advisory (SSA:2016-270-01)

2022-04-21 00:00:00

OpenSSL Missing CRL sanity check Vulnerability - Windows

2016-09-26 00:00:00

OpenSSL Missing CRL sanity check Vulnerability - Linux

2016-09-26 00:00:00

prion

Null pointer dereference

2016-09-26 19:59:00

nessus

OpenSSL 1.0.2i CRL Handling NULL Pointer Dereference DoS

2016-09-28 00:00:00

Slackware 14.2 / current : openssl (SSA:2016-270-01)

2016-09-27 00:00:00

FreeBSD : OpenSSL -- multiple vulnerabilities (91a337d8-83ed-11e6-bf52-b499baebfeaf)

2016-09-27 00:00:00

ubuntucve

CVE-2016-7052

2016-09-26 00:00:00

freebsd_advisory

FreeBSD-SA-16:27.openssl

2016-10-10 00:00:00

debiancve

CVE-2016-7052

2016-09-26 19:59:00

freebsd

OpenSSL -- multiple vulnerabilities

2016-09-26 00:00:00

threatpost

OpenSSL Fixes Critical Bug Introduced by Latest Update

2016-09-26 10:45:04

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Active Bypass (CVE-2016-6304, CVE-2016-6303, CVE-2016-2181, CVE-2016-6309, CVE-2016-7052 )

2018-06-16 21:49:05

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Controller (CVE-2016-6304, CVE-2016-6303, CVE-2016-6308, CVE-2016-2181, CVE-2016-6309, CVE-2016-7052 )

2018-06-16 21:49:05

Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2016-6303, CVE-2016-2182, CVE-2016-2178, CVE-2016-6306, CVE-2016-2183, CVE-2016-2177, CVE-2016-7052)

2018-06-17 15:36:58

suse

Security update for nodejs4 (important)

2016-11-01 16:19:35

Security update for nodejs4 (important)

2016-10-06 20:14:21

Security update for nodejs (important)

2016-10-11 19:20:03

fedora

[SECURITY] Fedora 25 Update: openssl-1.0.2j-1.fc25

2016-10-09 03:28:42

[SECURITY] Fedora 24 Update: openssl-1.0.2j-1.fc24

2016-09-28 01:57:16

[SECURITY] Fedora 23 Update: openssl-1.0.2j-1.fc23

2016-10-11 23:24:05

aix

Vulnerabilities in OpenSSL affect AIX

2016-11-14 13:29:26

gentoo

OpenSSL: Multiple vulnerabilities

2016-12-07 00:00:00

symantec

SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016

2016-10-06 08:00:00

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016

2016-09-27 22:40:00

huawei

Security Advisory - Sixteen OpenSSL Vulnerabilities on Some Huawei products

2017-03-22 00:00:00

nodejsblog

Security updates for all active release lines, September 2016

2016-09-23 00:00:00

mageia

Updated virtualbox packages fixes security vulnerabilities

2016-12-06 00:49:27

packetstorm

Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle

2017-07-14 00:00:00

oracle

Oracle Critical Patch Update - April 2018

2018-04-17 00:00:00

Oracle Critical Patch Update - October 2016

2016-10-18 00:00:00

Oracle Critical Patch Update - January 2018

2018-01-16 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Related for RH:CVE-2016-7052