Improper input validation in Novell Open_enterprise_server
CVE-2013-3707
The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does not make the intended SSL_free and SSL_shutdown calls for the close of a TCP con…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.016 (72.4th percentile) — read the EPSS interpretation.
Affected products
- Novell Open_enterprise_server — versions 11.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)