Description

The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.

Remediation

References

CVE-2016-6302

Related Vulnerabilities

PrestaShop Deserialization of Untrusted Data Vulnerability (CVE-2025-25692)

WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.2)

WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)

Vanilla Forums Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4954)

WordPress Plugin WP Consultant Cross-Site Scripting (1.0)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2016-6302