| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 1.1.0a |
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free