Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Openssl | Openssl | 1.0.2a | 1.0.2a |
Openssl | Openssl | 1.0.2e | 1.0.2e |
Openssl | Openssl | 1.0.2b | 1.0.2b |
Openssl | Openssl | 1.0.2h | 1.0.2h |
Openssl | Openssl | 1.0.2c | 1.0.2c |
Openssl | Openssl | 1.0.2 | 1.0.2 |
Openssl | Openssl | 1.0.2 | 1.0.2 |
Openssl | Openssl | 1.0.2 | 1.0.2 |
Openssl | Openssl | 1.0.2f | 1.0.2f |
Openssl | Openssl | 1.0.2 | 1.0.2 |
Openssl | Openssl | 1.0.2d | 1.0.2d |