Novell

Suse Linux Enterprise Module For Web Scripting

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2016-7052

  • EPSS 13.86%
  • Published 26.09.2016 19:59:07
  • Last modified 12.04.2025 10:46:40

crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

5.9

CVE-2016-6306

  • EPSS 9%
  • Published 26.09.2016 19:59:02
  • Last modified 12.04.2025 10:46:40

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

7.8

CVE-2016-6304

  • EPSS 20.28%
  • Published 26.09.2016 19:59:00
  • Last modified 12.04.2025 10:46:40

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.