CVE-2016-0798

CVE-2016-0798 is a memory leak vulnerability in OpenSSL versions 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g, specifically within the SRP_VBASE_get_by_user implementation. A remote attacker can trigger this by providing an invalid username during a connection attempt, leading to a denial of service through memory consumption. Rated with a CVSS score of 7.5 (HIGH), this vulnerability is network-exploitable with low attack complexity and can result in high availability impact. While it garnered significant media coverage and community discussion at the time, there is no evidence of active exploitation, nor are there publicly available exploits in common frameworks like Metasploit or ExploitDB.