Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2015-3216 - Vulnerability Database
OpenSSL

OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2015-3216

Medium
Reference: CVE-2015-3216
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3216
Title: OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability
Overview:

Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server leading to use of a negative value for a certain length field.