OpenSSL OCSP Status Request Denial Of Service Vulnerability (CVE-2016-6304)
2016年12月21日
风险等级: 高
描述
A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.
保护信息
Apply associated Trend Micro DPI Rules.
解决方案
Trend Micro Deep Security DPI Rule Number: 1007970