A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
Configuration 12 (hide)
AND |
|
Configuration 13 (hide)
AND |
|
Configuration 14 (hide)
AND |
|
History
No history.
Information
Published : 2017-11-13 22:29
Updated : 2025-04-20 01:37
NVD link : CVE-2016-8610
Mitre link : CVE-2016-8610
CVE.ORG link : CVE-2016-8610
JSON object : View
Products Affected
redhat
- enterprise_linux_workstation
- enterprise_linux_server_aus
- enterprise_linux_server_tus
- jboss_enterprise_application_platform
- enterprise_linux_desktop
- enterprise_linux
- enterprise_linux_server
- enterprise_linux_server_eus
oracle
- timesten_in-memory_database
- application_testing_suite
- enterprise_manager_ops_center
- goldengate_application_adapters
- communications_analytics
- communications_ip_service_activator
- jd_edwards_enterpriseone_tools
- retail_predictive_application_server
- core_rdbms
- adaptive_access_manager
- peoplesoft_enterprise_peopletools
- weblogic_server
netapp
- oncommand_unified_manager
- smi-s_provider
- data_ontap
- ontap_select_deploy
- data_ontap_edge
- service_processor
- cn1610
- clustered_data_ontap
- cn1610_firmware
- storagegrid
- storagegrid_webscale
- snapcenter_server
- snapdrive
- host_agent
- oncommand_balance
- oncommand_workflow_automation
- e-series_santricity_os_controller
- clustered_data_ontap_antivirus_connector
fujitsu
- m12-2
- m10-4_firmware
- m12-1_firmware
- m12-2_firmware
- m10-4s_firmware
- m10-1
- m12-2s_firmware
- m10-4
- m10-1_firmware
- m12-1
- m12-2s
- m10-4s
paloaltonetworks
- pan-os
debian
- debian_linux
openssl
- openssl
CWE
CWE-400
Uncontrolled Resource Consumption