OpenSSL CVE-2016-6308 Denial of Service Vulnerability



OpenSSL is prone to denial-of-service vulnerability.

Attackers can exploit this issue to cause a memory exhaustion, denying service to legitimate users.

OpenSSL 1.1.0 is vulnerable; other versions may also be affected.

Information

Bugtraq ID: 93151
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2016-6308

Remote: Yes
Local: No
Published: Sep 23 2016 12:00AM
Updated: Apr 19 2017 07:05PM
Credit: Shi Lei (Gear Team, Qihoo 360 Inc.).
Vulnerable: Oracle VM VirtualBox 5.0.26
Oracle VM VirtualBox 5.0.22
Oracle VM VirtualBox 5.0.16
Oracle VM VirtualBox 5.0.14
Oracle VM VirtualBox 5.0.13
Oracle VM VirtualBox 5.0.12
Oracle VM VirtualBox 5.0.11
Oracle VM VirtualBox 5.0.10
Oracle VM VirtualBox 5.0.9
Oracle VM VirtualBox 5.0.8
Oracle VM VirtualBox 5.0.18
Oracle VM VirtualBox 5.0
Oracle Secure Global Desktop 5.3
Oracle Secure Global Desktop 5.2
Oracle Secure Global Desktop 4.71
Oracle OSS Support Tools 8.9.15.9.8
Oracle OSS Support Tools 8.8.15.7.15
Oracle Enterprise Manager Ops Center 12.3.2
Oracle Enterprise Manager Ops Center 12.2.2
Oracle Enterprise Manager Ops Center 12.1.4
Oracle Enterprise Manager Base Platform 12.1
Oracle Enterprise Manager Base Platform 13.2.0.0
Oracle Enterprise Manager Base Platform 13.1.0.0
Oracle API Gateway 11.1.2.4.0
OpenSSL Project OpenSSL 1.1
IBM Worklight Enterprise Edition 6.1.0.2
IBM Worklight Enterprise Edition 6.1.0.1
IBM Worklight Enterprise Edition 6.1.0.0
IBM Worklight Consumer Edition 6.1.0.2
IBM Worklight Consumer Edition 6.1.0.1
IBM Worklight Consumer Edition 6.1.0.0
IBM Tivoli Storage Productivity Center 5.2.12
IBM Tivoli Storage Productivity Center 5.2.10
IBM Tivoli Storage Productivity Center 5.2.6
IBM Tivoli Storage Productivity Center 5.2.5
IBM Tivoli Storage Productivity Center 5.2.2
IBM Tivoli Storage Productivity Center 5.2.1 0
IBM Tivoli Storage Productivity Center 5.2
IBM Tivoli Storage Productivity Center 5.2.7.1
IBM Tivoli Storage Productivity Center 5.2.7
IBM Tivoli Storage Productivity Center 5.2.5.1
IBM Tivoli Storage Productivity Center 5.2.4.1
IBM Tivoli Storage Productivity Center 5.2.4
IBM Tivoli Storage Productivity Center 5.2.3
IBM Tivoli Storage Productivity Center 5.2.1.1
IBM Sterling Connect:Express for UNIX 1.5.0.9
IBM Sterling Connect:Express for UNIX 1.5.0.13
IBM Sterling Connect:Express for UNIX 1.5.0.12
IBM Sterling Connect:Express for UNIX 1.5.0.11
IBM Sterling Connect:Express for UNIX 1.5.0
IBM Sterling Connect:Express for UNIX 1.4.6
IBM Sterling Connect:Express for UNIX 1.4
IBM Spectrum Control 5.2.11
IBM Spectrum Control 5.2.10
IBM Spectrum Control 5.2.9
IBM Spectrum Control 5.2.8
IBM Service Delivery Manager 7.2.4
IBM Service Delivery Manager 7.2.3
IBM Service Delivery Manager 7.2.2
IBM Service Delivery Manager 7.2.1
IBM Security Virtual Server Protection for VMware 1.1.1
IBM Security Virtual Server Protection for VMware 1.1.0.1
IBM Security Virtual Server Protection for VMware 1.1
IBM Security Network Controller 1.0.3387
IBM Security Network Controller 1.0.3381
IBM Security Network Controller 1.0.3376
IBM Security Network Controller 1.0.3361
IBM Security Network Controller 1.0.1768
IBM Security Network Controller 1.0.1209
IBM Security Network Controller 1.0.3394
IBM RRDI 5.0.2
IBM RRDI 5.0.1
IBM RRDI 2.0.6
IBM RRDI 2.0.5
IBM RRDI 2.0.4
IBM RRDI 2.0.3
IBM RRDI 2.0.1
IBM RRDI 5.0
IBM RRDI 2.0
IBM Rational Insight 1.1.1 3
IBM Rational Insight 1.1.1 2
IBM Rational Insight 1.1.1 1
IBM Rational Insight 1.1.1
IBM Rational Insight 1.1.1.7
IBM Rational Insight 1.1.1.6
IBM Rational Insight 1.1.1.5
IBM Rational Insight 1.1.1.4
IBM Rational Insight 1.1
IBM MobileFirst Platform Foundation 8.0.0.0
IBM MobileFirst Platform Foundation 7.1.0.0
IBM MobileFirst Platform Foundation 7.0.0.0
IBM MobileFirst Platform Foundation 6.3.0.0
IBM i 7.3
IBM i 7.2
IBM i 7.1
IBM Flex System Manager 1.3.2 0
IBM Flex System Manager 1.3.4.0
IBM Flex System Manager 1.3.3.0
IBM Cognos Business Intelligence Server 10.2.2
IBM Cognos Business Intelligence Server 10.2.1 1
IBM Cognos Business Intelligence Server 10.2.1
IBM Cognos Business Intelligence Server 10.1.1
IBM Cognos Business Intelligence Server 10.2
Cisco Wide Area Application Services (WAAS) 0
Cisco WebEx Node for MCS 0
Cisco WebEx Meetings Server - Multimedia Platform (MMP) 0
Cisco WebEx Meetings Server 2.0
Cisco WebEx Meetings Server 1.0
Cisco WebEx Meetings for Windows Phone 8 0
Cisco WebEx Meetings for BlackBerry 0
Cisco WebEx Meetings for Android 0
Cisco WebEx Meetings Client - On-Premises 0
Cisco WebEx Meetings Client - Hosted 0
Cisco WebEx Meeting Center 0
Cisco WebEx Business Suite 0
Cisco Web Security Appliance (WSA) 0
Cisco Visual Quality Experience Tools Server 0
Cisco Visual Quality Experience Server 0
Cisco Virtualization Experience Media Edition 0
Cisco Virtual Security Gateway 0
Cisco Videoscape Control Suite 0
Cisco Videoscape AnyRes Live 0
Cisco Video Surveillance PTZ IP Cameras 0
Cisco Video Surveillance Media Server 0
Cisco Video Surveillance 7000 Series IP Cameras 0
Cisco Video Surveillance 6000 Series IP Cameras 0
Cisco Video Surveillance 4300E and 4500E High-Definition IP Cameras 0
Cisco Video Surveillance 4000 Series High-Definition IP Cameras 0
Cisco Video Surveillance 3000 Series IP Cameras 0
Cisco Video Distribution Suite for Internet Streaming (VDS-IS/CDS-IS) 0
Cisco Universal Small Cell Iuh 0
Cisco Universal Small Cell CloudBase Factory Recovery Root Filesystem 2.99.4
Cisco Universal Small Cell CloudBase Factory Recovery Root Filesystem 0
Cisco Universal Small Cell 7000 Series 3.4.2.0
Cisco Universal Small Cell 5000 Series 3.4.2.0
Cisco Universal Small Cell 5000 Series 0
Cisco Unity Express 0
Cisco Unity Connection 0
Cisco Unified Workforce Optimization - Quality Management Solution 0
Cisco Unified Workforce Optimization 0
Cisco Unified SIP Proxy Software 0
Cisco Unified MeetingPlace 0
Cisco Unified IP 9971 Phone 0
Cisco Unified IP 9951 Phone 0
Cisco Unified IP 8961 Phone 0
Cisco Unified IP 8945 Phone 0
Cisco Unified IP 8831 Conference Phone for Third-Party Call Control 0
Cisco Unified IP 8831 Conference Phone 0
Cisco Unified IP 7900 Series Phones 0
Cisco Unified IP 6945 Phone 0
Cisco Unified IP 6901 Phone 0
Cisco Unified Intelligent Contact Management Enterprise 0
Cisco Unified Intelligence Center 0
Cisco Unified Contact Center Express 0
Cisco Unified Contact Center Enterprise 0
Cisco Unified Communications Manager Session Management Edition 0
Cisco Unified Communications Manager IM & Presence Service (formerly C 0
Cisco Unified Communications Manager (CUCM) 0
Cisco Unified Communications Domain Manager 0
Cisco Unified Attendant Console Premium Edition 0
Cisco Unified Attendant Console Enterprise Edition 0
Cisco Unified Attendant Console Department Edition 0
Cisco Unified Attendant Console Business Edition 0
Cisco Unified Attendant Console Advanced 0
Cisco UCS Standalone C-Series Rack Server - Integrated Management Cont 0
Cisco UCS Manager 0
Cisco UCS Director 0
Cisco UCS Central Software 0
Cisco UCS B-Series Blade Servers 0
Cisco UCS 6200 Series and 6300 Series Fabric Interconnects 0
Cisco UC Integration for Microsoft Lync 0
Cisco TelePresence Video Communication Server (VCS) 0
Cisco TelePresence TX9000 Series 0
Cisco TelePresence System TX1310 0
Cisco TelePresence System EX Series 0
Cisco TelePresence System 500-37 0
Cisco TelePresence System 500-32 0
Cisco TelePresence System 3000 Series 0
Cisco TelePresence System 1300 0
Cisco TelePresence System 1100 0
Cisco TelePresence System 1000 0
Cisco TelePresence SX Series 0
Cisco TelePresence Supervisor MSE 8050 0
Cisco TelePresence Server on Virtual Machine 0
Cisco TelePresence Server on Multiparty Media 820 0
Cisco TelePresence Server on Multiparty Media 310 and 320 0
Cisco TelePresence Server 7010 and MSE 8710 0
Cisco TelePresence Serial Gateway Series 0
Cisco TelePresence Profile Series 0
Cisco TelePresence MX Series 0
Cisco TelePresence MCU 0
Cisco TelePresence ISDN Link 0
Cisco TelePresence ISDN Gateway MSE 8321 0
Cisco TelePresence ISDN Gateway 3241 0
Cisco TelePresence Integrator C Series 0
Cisco TelePresence Content Server 0
Cisco TelePresence Conductor 0
Cisco TAPI Service Provider (TSP) 0
Cisco Tandberg Codian MSE 8320 0
Cisco Tandberg Codian ISDN Gateway 0
Cisco StealthWatch UDP Director 0
Cisco StealthWatch Management Console (SMC) 0
Cisco StealthWatch IDentity 0
Cisco StealthWatch FlowCollector sFlow 0
Cisco StealthWatch FlowCollector NetFlow 0
Cisco SPA525G 5-Line IP Phone 0
Cisco SPA232D Multi-Line DECT Analog Telephone Adapter (ATA) 0
Cisco SPA122 Analog Telephone Adapter (ATA) with Router 0
Cisco SPA112 2-Port Phone Adapter 0
Cisco SocialMiner 0
Cisco Smart Net Total Care - Local Collector appliance 0
Cisco Smart Care 0
Cisco Small Business 300 Series (Sx300) Managed Switches 0
Cisco Show and Share 0
Cisco Services Provisioning Platform 0
Cisco Security Manager 0
Cisco Secure Access Control System (ACS) 0
Cisco Registered Envelope Service 0
Cisco Proactive Network Operations Center 0
Cisco Prime Performance Manager 0
Cisco Prime Optical for Service Providers 0
Cisco Prime Network Services Controller 0
Cisco Prime Network 0
Cisco Prime License Manager 0
Cisco Prime IP Express 0
Cisco Prime Infrastructure Plug and Play Standalone Gateway 0
Cisco Prime Data Center Network Manager -
Cisco Prime Collaboration Provisioning 0
Cisco Prime Collaboration Deployment 0
Cisco Prime Collaboration Assurance 0
Cisco Prime Access Registrar 0
Cisco Partner Support Service 1.0
Cisco Paging Server (Informacast) 0
Cisco Paging Server 0
Cisco Packaged Contact Center Enterprise 0
Cisco ONS 15454 Series Multiservice Provisioning Platforms 0
Cisco onePK All-in-One Virtual Machine 0
Cisco Nexus 9000 Series Switches - Standalone NX-OS mode 0
Cisco Nexus 9000 Series Fabric Switches - ACI mode 0
Cisco Nexus 7000 Series Switches 0
Cisco Nexus 6000 Series Switches 0
Cisco Nexus 5000 Series Switches 0
Cisco Nexus 4000 Series Blade Switches 0
Cisco Nexus 1000V Series Switches 0
Cisco Network Performance Analysis 0
Cisco Network Analysis Module 0
Cisco NetFlow Generation Appliance 0
Cisco NAC Guest Server 0
Cisco NAC Appliance - Clean Access Server 0
Cisco NAC Appliance - Clean Access Manager 0
Cisco MXE 3500 Series Media Experience Engines 0
Cisco Multicast Manager 0
Cisco MediaSense 0
Cisco Media Services Interface 0
Cisco MDS 9000 Series Multilayer Switches 0
Cisco Management Appliance 0
Cisco Jabber Software Development Kit 0
Cisco Jabber Guest 0
Cisco Jabber for Windows 0
Cisco Jabber for Mac 0
Cisco Jabber for iPhone and iPad 0
Cisco Jabber for Android 0
Cisco Jabber Client Framework (JCF) Components 0
Cisco IP Interoperability and Collaboration System (IPICS) 0
Cisco IP 8800 Series Phones - VPN feature 0
Cisco IP 7800 Series Phones 0
Cisco Intrusion Prevention System (IPS) Solutions 0
Cisco InTracer 0
Cisco Hosted Collaboration Mediation Fulfillment 0
Cisco FireSIGHT System Software 0
Cisco Expressway series 0
Cisco Enterprise Content Delivery System (ECDS) 0
Cisco Emergency Responder 0
Cisco Email Security Appliance (ESA) 0
Cisco Edge 340 Digital Media Player 0
Cisco Edge 300 Digital Media Player 0
Cisco DX Series IP Phones 0
Cisco Content Security Management Appliance (SMA) 0
Cisco Content Security Appliance Update Servers 0
Cisco Connected Grid Routers 0
Cisco Computer Telephony Integration Object Server (CTIOS) 0
Cisco Common Services Platform Collector 0
Cisco Cloupia Unified Infrastructure Controller 0
Cisco Cloud Web Security 0
Cisco Cloud Object Storage 0
Cisco Clean Access Manager 0
Cisco ATA 190 Series Analog Terminal Adaptors 0
Cisco ATA 187 Analog Telephone Adaptor 0
Cisco ASR 5000 Series 0
Cisco ASA Next-Generation Firewall Services 0
Cisco Application Policy Infrastructure Controller (APIC) 0
Cisco Application and Content Networking System (ACNS) 0
Cisco AnyConnect Secure Mobility Client for Windows 0
Cisco AnyConnect Secure Mobility Client for Mac OS X 0
Cisco AnyConnect Secure Mobility Client for Linux 0
Cisco AnyConnect Secure Mobility Client for iOS 0
Cisco AnyConnect Secure Mobility Client for desktop platforms 0
Cisco AnyConnect Secure Mobility Client for Android 0
Cisco Aironet 2700 Series Access Points 0
Cisco Agent for OpenFlow 0
Cisco Agent Desktop for Cisco Unified Contact Center Express 0
Cisco Adaptive Security Appliance (ASA) 0
Cisco ACE30 Application Control Engine Module 0
Cisco ACE 4710 Application Control Engine 0
Cisco 910 Industrial Router 0
Cisco 500 Series Stackable (Sx500) Managed Switches 0
Cisco 4400 Series Digital Media Players 0
Cisco 4300 Series Digital Media Players 0
Cisco 220 Series Smart Plus (Sx220) Switches 0


Not Vulnerable: Oracle VM VirtualBox 5.1.8
Oracle VM VirtualBox 5.0.28
Oracle OSS Support Tools 8.15.17.3.14
OpenSSL Project OpenSSL 1.1.0a
IBM Sterling Connect:Express for UNIX 1.5.0.13 iFix 150-13
Cisco Wireless Lan Controller 8.4
Cisco WebEx Meetings Server 2.6.1.30
Cisco WebEx Meetings for Windows Phone 8 2.8
Cisco WebEx Meetings Client - On-Premises T32
Cisco WebEx Meetings Client - Hosted T32
Cisco WebEx Centers T32
Cisco Virtualization Experience Media Edition 11.8
Cisco Virtual Security Gateway 2.1.6
Cisco Videoscape AnyRes Live 9.7.2
Cisco Video Surveillance PTZ IP Cameras 2.9
Cisco Video Surveillance 7000 Series IP Cameras 2.9
Cisco Video Surveillance 6000 Series IP Cameras 2.9
Cisco Video Surveillance 4300E and 4500E High-Definition IP Cameras 2.9
Cisco Video Surveillance 4000 Series High-Definition IP Cameras 2.9
Cisco Video Surveillance 3000 Series IP Cameras 2.9
Cisco Video Distribution Suite for Internet Streaming (VDS-IS/CDS-IS) 4.003(002)
Cisco Universal Small Cell Iuh 3.17.3
Cisco Universal Small Cell CloudBase Factory Recovery Root Filesystem 3.17.3
Cisco Universal Small Cell 7000 Series 3.5.12.23
Cisco Universal Small Cell 5000 Series 3.5.12.23
Cisco Unity Express 10
Cisco Unified Workforce Optimization - Quality Management Solution 11.5(1)SU1
Cisco Unified SIP Proxy Software 10
Cisco Unified MeetingPlace 8.6MR1
Cisco Unified IP 8831 Conference Phone for Third-Party Call Control 9.3(4)SR3
Cisco Unified IP 8831 Conference Phone 10.3.1SR4
Cisco Unified IP 6901 Phone 9.3(1)SR3
Cisco Unified Intelligent Contact Management Enterprise 11.6.1
Cisco Unified Intelligence Center 11.6(1)
Cisco Unified Contact Center Express 11.6
Cisco Unified Contact Center Enterprise 11.6.1
Cisco UCS Standalone C-Series Rack Server - Integrated Management Cont 3.0
Cisco UCS B-Series Blade Servers 3.1.3
Cisco UC Integration for Microsoft Lync 11.6.3
Cisco TelePresence Video Communication Server (VCS) X8.8.3
Cisco TelePresence TX9000 Series 6.1
Cisco TelePresence System TX1310 6.1
Cisco TelePresence System EX Series TC7.3.7
Cisco TelePresence System EX Series CE8.2.2
Cisco Telepresence System 500-37 6.1
Cisco Telepresence System 500-32 6.1
Cisco TelePresence System 3000 Series 6.1
Cisco Telepresence System 1300 6.1
Cisco Telepresence System 1100 6.1
Cisco Telepresence System 1000 6.1
Cisco TelePresence SX Series TC7.3.7
Cisco TelePresence SX Series CE8.2.2
Cisco TelePresence Server on Multiparty Media 820 4.4
Cisco TelePresence Server on Multiparty Media 310 and 320 4.4
Cisco TelePresence Server 7010 and MSE 8710 4.4
Cisco TelePresence Profile Series TC7.3.7
Cisco TelePresence Profile Series CE8.2.2
Cisco TelePresence MX Series TC7.3.7
Cisco TelePresence MX Series CE8.2.2
Cisco TelePresence MCU 4.5(1.89)
Cisco TelePresence Integrator C Series TC7.3.7
Cisco TelePresence Integrator C Series CE8.2.2
Cisco SPA232D Multi-Line DECT Analog Telephone Adapter (ATA) 1.4.2
Cisco SPA122 Analog Telephone Adapter (ATA) with Router 1.4.2
Cisco SPA112 2-Port Phone Adapter 1.4.2
Cisco Services Provisioning Platform SFP1.1
Cisco Security Manager 4.13
Cisco Secure Access Control System (ACS) 5.8.0.32.8
Cisco Secure Access Control System (ACS) 5.8.0.32.7
Cisco Prime Performance Manager 1.7 SP1611
Cisco Prime Network Services Controller 1.01u
Cisco Prime Network Registrar 8.3.5
Cisco Prime Network Registrar 9.0
Cisco Prime Network 431
Cisco Prime Infrastructure 3.2
Cisco Prime Collaboration Provisioning 11.6
Cisco Prime Collaboration Assurance 11.6
Cisco ONS 15454 Series Multiservice Provisioning Platforms 10.7
Cisco Nexus 9000 Series Switches - Standalone NX-OS mode 7.0(3)I5(1)
Cisco Nexus 9000 Series Fabric Switches - ACI mode 0
Cisco Nexus 7000 Series Switches 6.2.19
Cisco Nexus 7000 Series Switches 5.2.8(i)
Cisco Nexus 6000 Series Switches 6.2.19
Cisco Nexus 6000 Series Switches 5.2.8(i)
Cisco Nexus 5000 Series Switches 6.2.19
Cisco Nexus 5000 Series Switches 5.2.8(i)
Cisco Nexus 4000 Series Blade Switches 4.1(2)E1(1r)
Cisco Nexus 1000V Series Switches 5.2(1)SV3(2.5)
Cisco Network Analysis Module 6.2(2)
Cisco Network Analysis Module 6.2(1-b)
Cisco NetFlow Generation Appliance 1.1(1)
Cisco MDS 9000 Series Multilayer Switches 6.2.19
Cisco MDS 9000 Series Multilayer Switches 5.2.8(i)
Cisco Jabber Software Development Kit 11.8
Cisco Jabber Guest 11
Cisco Jabber for Windows 11.8
Cisco Jabber for Mac 11.8
Cisco Jabber for iPhone and iPad 11.8
Cisco Jabber for Android 11.8
Cisco Jabber Client Framework (JCF) Components 11.8
Cisco IP Interoperability and Collaboration System (IPICS) 5.0(1)
Cisco IOS and Cisco IOS XE Software 16.4
Cisco IOS and Cisco IOS XE Software 16.3
Cisco IOS and Cisco IOS XE Software 16.2
Cisco IOS and Cisco IOS XE Software 16.1
Cisco IOS and Cisco IOS XE Software 15.5(3)
Cisco FireSIGHT System Software 6.1.0.1
Cisco FireSIGHT System Software 6.0.1.3
Cisco FireSIGHT System Software 5.4.1.9
Cisco FireSIGHT System Software 5.4.0.10
Cisco Expressway series X8.8.3
Cisco Enterprise Content Delivery System (ECDS) 2.6.9
Cisco Email Security Appliance (ESA) 10.0.1
Cisco Edge 340 Digital Media Player 1.2RB1.0.3
Cisco Edge 300 Digital Media Player 1.6RB5
Cisco Digital Media Manager 5.4.1_RB4
Cisco Digital Media Manager 5.3.6_RB3
Cisco DCM Series D9900 Digital Content Manager 0
Cisco Content Security Management Appliance (SMA) 6.1.140
Cisco Connected Grid Routers 15.8.9
Cisco Connected Grid Routers 7.3
Cisco Computer Telephony Integration Object Server (CTIOS) 11.6.1
Cisco Common Services Platform Collector 1.11
Cisco ATA 190 Series Analog Terminal Adaptors 1.3
Cisco ASR 5000 Series 21.2
Cisco ASA Next-Generation Firewall Services 2.1.2
Cisco Application Policy Infrastructure Controller (APIC) 2.2(1)
Cisco AnyConnect Secure Mobility Client for Windows 4.0.7
Cisco AnyConnect Secure Mobility Client for Mac OS X 4.0.7
Cisco AnyConnect Secure Mobility Client for Linux 4.0.7
Cisco AnyConnect Secure Mobility Client for iOS 4.0.7
Cisco AnyConnect Secure Mobility Client for desktop platforms 4.3.4
Cisco AnyConnect Secure Mobility Client for desktop platforms 4.4
Cisco AnyConnect Secure Mobility Client for Android 4.0.7
Cisco Aironet 2700 Series Access Points 16.4
Cisco Aironet 2700 Series Access Points 16.3
Cisco Aironet 2700 Series Access Points 16.2
Cisco Aironet 2700 Series Access Points 16.1
Cisco Aironet 2700 Series Access Points 15.5(3)
Cisco 910 Industrial Router 1.2.1RB4
Cisco 4400 Series Digital Media Players 5.4.1_RB4
Cisco 4400 Series Digital Media Players 5.3.6_RB3
Cisco 4300 Series Digital Media Players 5.4.1_RB4
Cisco 4300 Series Digital Media Players 5.3.6_RB3



Related Posts