CVE-2016-7052

openssl: Missing CRL sanity check

Published Sep 26, 2016 CVSS 3.1 · 7.5 High EPSS 29.5% KEV · Not listed
Description
crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 1:50 AM
Reserved
Aug 23, 2016, 12:00 AM
Status
Modified
Published
Sep 26, 2016, 7:59 PM
Modified
Jun 17, 2026, 12:52 AM
Severity
Moderate
Public date
Sep 26, 2016, 12:00 AM