Analysis of OpenSSL Large Message Size Handling Use After Free (CVE-2016-6309)

OpenSSL released an emergency security update shortly after a patch was issued a few weeks ago. This security update addresses a critical Use After Free vulnerability introduced by the updated code that revised to resolve the earlier low severity vulnerability CVE-2016-6307.



Fortinet Blog