Test ID:	1.3.6.1.4.1.25623.1.0.107054
Category:	Web application abuses
Title:	OpenSSL 1.1.0a Use-After-Free Fix Vulnerability - Linux
Summary:	OpenSSL is prone to a denial of service (DoS) or a remote code; execution (RCE) vulnerability.
Description:	Summary: OpenSSL is prone to a denial of service (DoS) or a remote code execution (RCE) vulnerability. Vulnerability Insight: OpenSSL suffers from the possibility of Remote Code Execution or DoS attack after a patch applied to fix the 'Use-After-Free' issue which enable attacker to write to the previously freed location. Vulnerability Impact: Successful exploitation could result in service crash or execution of arbitrary code. Affected Software/OS: OpenSSL 1.1.0a. Solution: OpenSSL 1.1.0 users should upgrade to 1.1.0b. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6309 BugTraq ID: 93177 http://www.securityfocus.com/bid/93177 http://www.securitytracker.com/id/1036885
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.