CVE-2016-2179 in Business Intelligence Enterprise Edition

요약 (영어)

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

예약하다

2016. 01. 29.

공개

2016. 09. 16.

상태

확인됨

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
112027	Oracle Business Intelligence Enterprise Edition Analytics Server 서비스 거부	399	개념 증명	공식 수정	CVE-2016-2179
91906	OpenSSL DTLS Buffer 서비스 거부	404	정의되지 않음	공식 수정	CVE-2016-2179
90940	OpenSSL DTLS Fragment Memory 서비스 거부	399	정의되지 않음	공식 수정	CVE-2016-2179

출처

• MITRE
• NVD
• CVE Details