CVE-2016-7052

crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

Affected products

Alt Linux, Freebsd, Huawei Vrp, Ibm Aix, Nessus, Openssl, Suse, Node.Js

Novell Suse Linux Enterprise Module For Web Scripting

= 12.0

Fix

Available

CVSS 3.1

7.5 HIGH

EPSS

30.2% (98th percentile)

Weakness

CWE-476

NVD status

Modified

Published

2016-09-26