SUSE CVE-2016-6307

The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service memory consumption via crafted TLS messages, related to statem/statem.c and statem/statemlib.c...

The vulnerability of the statem/statem.c and statem/statem_lib.c components of the OpenSSL library allows a attacker to cause a service failure.

The vulnerability of the statem/statem.c and statem/statemlib.c components of the OpenSSL library is related to a bug in the resource consumption control mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted TLS message...