Novell Suse Linux Enterprise Module For Web Scripting vulnerabilities

3 CVEs affecting Novell Suse Linux Enterprise Module For Web Scripting, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-7052, published 2016-09-26.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-6304, published 2016-09-26. High severity, CVSS 7.5. EPSS: 63% chance of exploitation in the next 30 days. Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status…
• CVE-2016-6306, published 2016-09-26. Medium severity, CVSS 5.9. EPSS: 41.7% chance of exploitation in the next 30 days. The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to…
• CVE-2016-7052, published 2016-09-26. High severity, CVSS 7.5. EPSS: 29.5% chance of exploitation in the next 30 days. crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.