Launchpad CVE tracker

CVE 2016-7052

crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

Related bugs and status

CVE-2016-7052 (Candidate) is related to these bugs:

Bug #1811531: remote execution vulnerability

		In	Importance	Status
1811531	remote execution vulnerability	zeromq3 (Ubuntu)	Undecided	Fix Released
1811531	remote execution vulnerability	zeromq3 (Debian)	Unknown	Fix Released
1811531	remote execution vulnerability	zeromq (Suse)	High	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: https://git.openssl.or...
CONFIRM: https://www.openssl.or...
BID: 93171
SUSE: SUSE-SU-2016:2470
CONFIRM: http://www.oracle.com/...
CONFIRM: https://bto.bluecoat.c...
GENTOO: GLSA-201612-16
CONFIRM: http://www-01.ibm.com/...
CONFIRM: https://www.tenable.co...
CONFIRM: http://kb.juniper.net/...
CONFIRM: https://kc.mcafee.com/...
SECTRACK: 1036885
CONFIRM: http://www.oracle.com/...
CONFIRM: http://www.oracle.com/...
CONFIRM: https://www.tenable.co...
CONFIRM: https://www.tenable.co...
FREEBSD: FreeBSD-SA-16:27
CONFIRM: http://www.oracle.com/...
CONFIRM: http://www.oracle.com/...
CONFIRM: https://support.hpe.co...

Launchpad.net

CVE 2016-7052

Related bugs and status

Related bugs

References