CVE-2016-6306

Source
https://nvd.nist.gov/vuln/detail/CVE-2016-6306
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6306.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6306
Related
Published
2016-09-26T19:59:02Z
Modified
2024-09-18T02:30:43.062853Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3clnt.c and s3srvr.c.

References

Affected packages

Alpine:v3.2 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2f-r0
1.0.2g-r0
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Alpine:v3.3 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2f-r0
1.0.2g-r0
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Alpine:v3.4 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Alpine:v3.5 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Alpine:v3.6 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Alpine:v3.7 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Alpine:v3.8 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-r0

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2
1.0.2h-r3
1.0.2h-r4

Debian:11 / openssl

Package

Name
openssl
Purl
pkg:deb/debian/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / openssl

Package

Name
openssl
Purl
pkg:deb/debian/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / openssl

Package

Name
openssl
Purl
pkg:deb/debian/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/nodejs/node

Affected ranges

Type
GIT
Repo
https://github.com/nodejs/node
Events

Affected versions

v4.*

v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.3.0
v4.3.1
v4.3.2
v4.4.0
v4.4.1
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.4.6
v4.4.7
v4.5.0