Novell Suse Linux Enterprise Module For Web Scripting vulnerabilities
3 vulnerabilities
Known vulnerabilities in Novell Suse Linux Enterprise Module For Web Scripting, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-7052alpineopenssl+4
EPSS score29.46%
crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.CVE-2016-6304alpineopenssl+10EPSS score63.03%
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.CVE-2016-6306alpineopenssl+11EPSS score41.68%
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.