CVE-2016-6309

statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.

We have discovered 243,749 live websites that are affected by CVE-2016-6309.

Run a Free Instant Scan



Affected Software

Product  OpenSSL
Category Web Server Extensions
Vulnerable Domains243,749 live websites (50% of OpenSSL install base)
Vulnerable Versions
  • from 0 through 1.1
Vulnerable Versions Count13 versions ( 18% of all versions)



Details

  • Published - Sep 26, 2016
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2016-6309
United States57,971 websites


Japan20,598 websites
Germany16,773 websites
Netherlands16,221 websites
Korea, South12,468 websites
Czech Republic11,762 websites
Russia8,400 websites
France7,782 websites
Italy7,246 websites

Website Distribution by TLD

Number of websites using CVE-2016-6309
.com85,634 websites
.nl12,779 websites
.net11,496 websites
.de10,257 websites
.org9,612 websites
.cz9,526 websites
.jp7,390 websites
.ru7,100 websites
.it5,938 websites
.co.jp4,400 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2016-6309

Top websites that are affected by CVE-2016-6309. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.com United States*,***
********.com United States*,***
*.******.***.***.br Brazil*,***
*.*****.***.***.br Brazil*,***
****.**.com United States*,***
*****.org United States*,***
*****.com United States*,***
*******.in United States*,***
********.biz Japan*,***
********.com United States*,***
See full domain list

FAQ

A total of 243,749 websites have been identified as vulnerable to CVE-2016-6309, based on global website indexing conducted by WebTechSurvey.
The OpenSSL is affected by the CVE-2016-6309 vulnerability.
OpenSSL versions up to and including 1.1 are vulnerable to CVE-2016-6309.

References