CVE-2016-6302

38

FAUCET Score

CVE-2016-6302 is a denial-of-service vulnerability in OpenSSL versions prior to 1.1.0, specifically impacting the tls_decrypt_ticket function. This flaw allows remote attackers to crash affected systems by providing a malformed, excessively short TLS ticket during validation. Rated as High severity (CVSS 7.5), it requires no user interaction and has a low attack complexity, leading to a high availability impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		1.0.1CPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.1:::::::*
		1.0.1aCPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
		1.0.1bCPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
		1.0.1cCPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
		1.0.1dCPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.1d:::::::*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.0

Exploit Intelligence

EPSS Score

26.44%

Probability of exploitation in next 30 days

EPSS Percentile

97.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.2644 is in the 96th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (34)

oraclepatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl-0:1.0.1e-48.el6_8.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.1e-51.el7_2.7

redhatpatch availablevia redhat_api

Product: Text-Only JBCS

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Web Server 3Fixed in: openssl

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl

Vendor Advisories (1)

redhatCVE-2016-6302Moderate

openssl: Insufficient TLS session ticket HMAC length checks

References

kb.juniper.net / InfoCenter/index

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-1940.html

access.redhat.com / errata/RHSA-2018:2185

access.redhat.com / errata/RHSA-2018:2186

access.redhat.com / errata/RHSA-2018:2187

bto.bluecoat.com / security-advisory/sa132

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf

git.openssl.org

kb.pulsesecure.net / articles/Pulse_Security_Advisories/SA40312

Third Party Advisory

security.freebsd.org / advisories/FreeBSD-SA-16:26.openssl.asc

tenable.com / security/tns-2016-16

Third Party Advisory

tenable.com / security/tns-2016-20

tenable.com / security/tns-2016-21

www-01.ibm.com / support/docview.wss

Third Party Advisory

oracle.com / technetwork/security-advisory/cpuapr2018-3678067.html

oracle.com / technetwork/security-advisory/cpujan2018-3236628.html

oracle.com / technetwork/security-advisory/cpujul2017-3236622.html

oracle.com / technetwork/security-advisory/cpuoct2016-2881722.html

PatchThird Party Advisory

oracle.com / technetwork/security-advisory/cpuoct2017-3236626.html

oracle.com / technetwork/topics/security/bulletinoct2016-3090566.html

PatchThird Party Advisory

oracle.com / technetwork/topics/security/linuxbulletinoct2016-3090545.html

PatchThird Party Advisory

oracle.com / technetwork/topics/security/ovmbulletinoct2016-3090547.html

PatchThird Party Advisory

securityfocus.com / bid/92628

Third Party AdvisoryVDB Entry

securitytracker.com / id/1036885

splunk.com / view/SP-CAAAPSV

Third Party Advisory

splunk.com / view/SP-CAAAPUE

Third Party Advisory