CVE-2016-6304

60

FAUCET Score

CVE-2016-6304 describes multiple memory leaks in OpenSSL versions prior to 1.0.1u, 1.0.2i, and 1.1.0a, specifically within the t1_lib.c file. This vulnerability affects various products including Node.js and OpenSSL itself, as well as Novell and SUSE Linux Enterprise distributions utilizing these components. Rated with a CVSS score of 7.5 (HIGH), it allows remote, unauthenticated attackers to cause a denial of service through memory consumption by sending large OCSP Status Request extensions. While the vulnerability has a high FAUCET Risk Score of 90/100 and significant community discussion and media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		1.0.2CPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.2:::::::*
		1.0.2CPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
		1.0.2CPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
		1.0.2CPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
		1.0.2aCPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.2a:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

63.03%

Probability of exploitation in next 30 days

EPSS Percentile

99.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.6303 is in the 98th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (39)

oraclepatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl-0:1.0.1e-48.el6_8.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: openssl-0:1.0.0-20.el6_2.9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: openssl-0:1.0.0-27.el6_4.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.5 Advanced Update SupportFixed in: openssl-0:1.0.1e-16.el6_5.17

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.5 Telco Extended Update SupportFixed in: openssl-0:1.0.1e-16.el6_5.17

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Advanced Update SupportFixed in: openssl-0:1.0.1e-30.el6_6.13

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Telco Extended Update SupportFixed in: openssl-0:1.0.1e-30.el6_6.13

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.7 Extended Update SupportFixed in: openssl-0:1.0.1e-42.el6_7.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.1e-51.el7_2.7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.4Fixed in: openssl

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 6Fixed in: tomcat6-0:6.0.41-17_patch_04.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 6Fixed in: tomcat7-0:7.0.54-25_patch_05.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 7Fixed in: tomcat6-0:6.0.41-17_patch_04.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 7Fixed in: tomcat7-0:7.0.54-25_patch_05.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 2.1Fixed in: openssl

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: log4j-eap6-0:1.2.16-12.redhat_3.1.ep6.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat7-0:7.0.70-22.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat8-0:8.0.36-24.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-native-0:1.2.8-10.redhat_10.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: log4j-eap6-0:1.2.16-12.redhat_3.1.ep6.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-22.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-24.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.8-10.redhat_10.ep7.el7

redhatpatch availablevia redhat_api

Product: Text-Only JBCS

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2 for RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 5Fixed in: openssl

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Web Server 3Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1Fixed in: openssl

Vendor Advisories (1)

redhatCVE-2016-6304Important

openssl: OCSP Status Request extension unbounded memory growth

References

kb.juniper.net / InfoCenter/index

Third Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-09/msg00022.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-09/msg00023.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-09/msg00024.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-09/msg00031.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-10/msg00005.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-10/msg00011.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-10/msg00012.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-10/msg00013.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-10/msg00021.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-10/msg00029.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-11/msg00021.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-11/msg00027.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2017-10/msg00010.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2017-10/msg00011.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-security-announce/2018-02/msg00032.html

Mailing ListThird Party Advisory

packetstormsecurity.com / files/139091/OpenSSL-x509-Parsing-Double-Free-Invalid-Free.html

Third Party AdvisoryVDB Entry

rhn.redhat.com / errata/RHSA-2016-1940.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2016-2802.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2017-1415.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2017-1659.html

Third Party Advisory

access.redhat.com / errata/RHSA-2017:1413

Third Party Advisory

access.redhat.com / errata/RHSA-2017:1414

Third Party Advisory

access.redhat.com / errata/RHSA-2017:1658

Third Party Advisory

access.redhat.com / errata/RHSA-2017:1801

Third Party Advisory

access.redhat.com / errata/RHSA-2017:1802

Third Party Advisory

access.redhat.com / errata/RHSA-2017:2493

Third Party Advisory

access.redhat.com / errata/RHSA-2017:2494

Third Party Advisory

bto.bluecoat.com / security-advisory/sa132

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf

seclists.org / fulldisclosure/2016/Dec/47

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2016/Oct/62

Mailing ListThird Party Advisory

seclists.org / fulldisclosure/2017/Jul/31

Mailing ListThird Party Advisory

git.openssl.org

kb.pulsesecure.net / articles/Pulse_Security_Advisories/SA40312

Third Party Advisory

kc.mcafee.com / corporate/index

Third Party Advisory

kc.mcafee.com / corporate/index

Third Party Advisory

nodejs.org / en/blog/vulnerability/september-2016-security-releases

Third Party Advisory

security.freebsd.org / advisories/FreeBSD-SA-16:26.openssl.asc

Third Party Advisory

security.gentoo.org / glsa/201612-16

Third Party Advisory

arista.com / en/support/advisories-notices/security-advisories/1749-security-advisory-24

Third Party Advisory

openssl.org / news/secadv/20160922.txt

Vendor Advisory

tenable.com / security/tns-2016-16

Third Party Advisory

tenable.com / security/tns-2016-20

Third Party Advisory

tenable.com / security/tns-2016-21

Third Party Advisory

www-01.ibm.com / support/docview.wss

Third Party Advisory

debian.org / security/2016/dsa-3673

Third Party Advisory

huawei.com / en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

Third Party Advisory

oracle.com / technetwork/security-advisory/cpuapr2018-3678067.html

PatchThird Party Advisory

oracle.com / technetwork/security-advisory/cpujan2018-3236628.html

PatchThird Party Advisory

oracle.com / technetwork/security-advisory/cpujul2017-3236622.html

PatchThird Party Advisory

oracle.com / technetwork/security-advisory/cpuoct2016-2881722.html

PatchThird Party Advisory

oracle.com / technetwork/security-advisory/cpuoct2017-3236626.html

PatchThird Party Advisory

oracle.com / technetwork/topics/security/linuxbulletinoct2016-3090545.html

Third Party Advisory

oracle.com / technetwork/topics/security/ovmbulletinoct2016-3090547.html

Third Party Advisory

securityfocus.com / bid/93150

Third Party AdvisoryVDB Entry

securitytracker.com / id/1036878

Third Party AdvisoryVDB Entry

securitytracker.com / id/1037640

Third Party AdvisoryVDB Entry

splunk.com / view/SP-CAAAPSV

Third Party Advisory

splunk.com / view/SP-CAAAPUE

Third Party Advisory

ubuntu.com / usn/USN-3087-1

Third Party Advisory

ubuntu.com / usn/USN-3087-2

Third Party Advisory