Security Advisory
CVE-2016-6309
9.8
CRITICAL
Vulnerability Description
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.
Published Date
September 26, 2016
Official Source
NIST NVD Advisory