Oval Definition:	oval:org.cisecurity:def:1929
Revision Date: 2017-03-03 Version: 4 Title: Multiple memory leaks in OpenSSL 1.0.1 before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a - CVE-2016-6304 Description: Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions. Family: windows Class: vulnerability Status: DRAFT Reference(s): CVE-2016-6304 Platform(s): Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Microsoft Windows Vista Microsoft Windows XP Product(s): OpenSSL Definition Synopsis OpenSSL is installed + file version OpenSSL is installed AND Check for file version Check if OpenSSL 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1t OR Check if OpenSSL 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2h OR Check if OpenSSL 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0a OR OpenSSL (x86) is installed + file version OpenSSL (32_bit) is installed AND Check for file version Check if OpenSSL 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1t (x86) OR Check if OpenSSL 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2h (x86) OR Check if OpenSSL 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0a (x86) OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1t on ProgramFilesDir OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1t on ProgramFilesDir (x86) OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1t on System32 and SysWOW64 OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2h on ProgramFilesDir OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2h on ProgramFilesDir (x86) OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2h on System32 and SysWOW64 OR Check if ssleay32.dll 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0a on ProgramFilesDir OR Check if ssleay32.dll 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0a on ProgramFilesDir (x86) OR Check if ssleay32.dll 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0a on System32 and SysWOW64
BACK