A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
Configuration 11 (hide)
| AND |
|
Configuration 12 (hide)
| AND |
|
Configuration 13 (hide)
| AND |
|
Configuration 14 (hide)
| AND |
|
History
No history.
Information
Published : 2017-11-13 22:29
Updated : 2025-04-20 01:37
NVD link : CVE-2016-8610
Mitre link : CVE-2016-8610
CVE.ORG link : CVE-2016-8610
JSON object : View
Products Affected
netapp
- cn1610
- smi-s_provider
- snapdrive
- oncommand_unified_manager
- oncommand_balance
- data_ontap_edge
- ontap_select_deploy
- cn1610_firmware
- clustered_data_ontap_antivirus_connector
- storagegrid
- clustered_data_ontap
- oncommand_workflow_automation
- e-series_santricity_os_controller
- storagegrid_webscale
- service_processor
- snapcenter_server
- data_ontap
- host_agent
oracle
- retail_predictive_application_server
- communications_analytics
- timesten_in-memory_database
- weblogic_server
- jd_edwards_enterpriseone_tools
- adaptive_access_manager
- core_rdbms
- application_testing_suite
- communications_ip_service_activator
- peoplesoft_enterprise_peopletools
- goldengate_application_adapters
- enterprise_manager_ops_center
fujitsu
- m12-2s_firmware
- m12-2_firmware
- m10-1_firmware
- m10-4s
- m10-4s_firmware
- m12-2s
- m10-4
- m12-1
- m10-1
- m12-1_firmware
- m10-4_firmware
- m12-2
debian
- debian_linux
redhat
- enterprise_linux_server
- enterprise_linux_server_aus
- enterprise_linux_server_tus
- enterprise_linux_workstation
- enterprise_linux_server_eus
- enterprise_linux
- jboss_enterprise_application_platform
- enterprise_linux_desktop
paloaltonetworks
- pan-os
openssl
- openssl
CWE
CWE-400
Uncontrolled Resource Consumption
