system
Describe <CVE-2016-6309>.
user
What is <CVE-2016-6309>?
assistant
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session..