Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Resource Management Errors Vulnerability - CVE-2016-2179 - Vulnerability Database
OpenSSL

OpenSSL Resource Management Errors Vulnerability - CVE-2016-2179

High
Reference: CVE-2016-2179
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-2179
Title: OpenSSL Resource Management Errors Vulnerability
Overview:

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously related to d1_lib.c statem_dtls.c statem_lib.c and statem_srvr.c.