CVE-2016-6307

OpenSSL CVE-2016-6307 (and related CVE-2016-6308) describe a memory-allocation flaw in the 1.1.0 series: the state-machine/dtls1 preprocessing paths allocate memory before checking excessive message length in TLS/DTLS messages, enabling potential denial-of-service via memory consumption. Details ...

Vulnerability in OpenSSL - Fix Use After Free for large message sizes

This issue only affects OpenSSL 1.1.0a, released on 22nd September 2016. The patch applied to address CVE-2016-6307 resulted in an issue where if a message larger than approx 16k is received then the underlying buffer to store the incoming message is reallocated and moved. Unfortunately a danglin...

OpenSSL SSL_peek hang on empty record DoS Vulnerability - Linux

OpenSSL is prone to a Denial of Service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

[slackware-security] openssl

New openssl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssl-1.0.2i-i586-1slack14.2.txz: Upgraded. This update fixes denial-of-service and other security issues. For more...

CVE-2015-6307

Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 series devices running software 5.4.0.1 are affected by CVE-2015-6307. The vulnerability allows an unauthenticated, adjacent attacker to cause the inspection engine to stall or stop processing packets by sending crafted packets, potentially resu...

CVE-2013-6307

IBM QRadar SIEM 7.0 contains a Cross-Site Scripting (XSS) flaw (CVE-2013-6307) that allows remote attackers with network access to inject arbitrary script via unspecified vectors. The IBM advisory notes the issue affects QRadar SIEM 7.0 and, in terms of impact, can affect data integrity while not...

CVE-2012-6307

creationtimestamp| type| source ---|---|--- 2012-10-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21739 2020-02-06 20:35:30+00:00| seen| https://t.me/cibsecurity/9675...

CVE-2008-6307

This CVE concerns E-topbiz Link Back Checker 1 where an attacker can bypass authentication by setting the auth cookie to "admin", potentially gaining administrative access. The vulnerability is triggered via manipulation of the auth cookie, enabling privilege elevation without credentials. The av...

CVE-2008-6307

creationtimestamp| type| source ---|---|--- 2008-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7156...

CVE-2007-6307

Multiple cross-site scripting XSS vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via 1 the link parameter or 2 the User-Agent HTTP header...

CVE-2007-6307

CVE-2007-6307 affects wwwstats 3.21, specifically the clickstats.php component. It describes cross-site scripting (XSS) via user-supplied input in the link parameter or the User-Agent header, enabling remote attackers to inject arbitrary script/HTML. The CVSS base score is 4.3 (Medium) with impac...

CVE-2006-6307

The CVE-2006-6307 issue affects the srvloc.sys driver in Novell Client for Windows prior to version 4.91 SP3. A crafted packet to port 427 can cause denial of service by triggering access to pageable or invalid addresses at an unnecessarily high IRQL, yielding partial availability impact as per t...