Security Advisory
CVE-2016-6302
7.5
HIGH
Vulnerability Description
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
Published Date
September 16, 2016
Official Source
NIST NVD Advisory