CVE-2016-8610

CWE-400 — Uncontrolled Resource Consumption17 documents9 sources
Severity
7.5HIGH
EPSS
71.1%
top 1.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
29
Fujitsu M10-1 FirmwareFujitsu M10-4 FirmwareFujitsu M10-4s Firmware+26 more
Timeline
PublishedNov 13
Latest updateMay 13

Description

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages28 packages

▶Debianopenssl< 1.0.2j-1+3
▶NVDopenssl/openssl1.0.2 — 1.0.2h+3
▶CVEListV5openssl/openssl4 versions+3
▶NVDoracle/weblogic_server4 versions+3

Also affects: Debian Linux 8.0, Enterprise Linux 7.3, 7.4, 7.6, 7.5

Patches

Patch: bugzilla.redhat.com ↗Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

5
GHSA
GHSA-v2q2-jxh8-m5h8: A denial of service flaw was found in OpenSSL 0↗2022-05-13
▶
OSV
CVE-2016-8610: A denial of service flaw was found in OpenSSL 0↗2017-11-13
▶
CVEList
CVE-2016-8610: A denial of service flaw was found in OpenSSL 0↗2017-11-13
▶
OSV
gnutls26 vulnerability↗2017-03-20
▶
OSV
gnutls26, gnutls28 vulnerabilities↗2017-02-01
▶

📋Vendor Advisories

6
Ubuntu
GnuTLS vulnerability↗2017-03-20
▶
Ubuntu
GnuTLS vulnerabilities↗2017-02-01
▶
Ubuntu
OpenSSL vulnerabilities↗2017-01-31
▶
BSD
FreeBSD-SA-16:35.openssl: OpenSSL Remote DoS vulnerability↗2016-11-02
▶
Red Hat
SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS↗2016-10-24
▶

💬Community

5
Bugzilla
CVE-2016-8610 openssl101e: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [epel-5]↗2016-10-26
▶
Bugzilla
CVE-2016-8610 openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]↗2016-10-26
▶
Bugzilla
CVE-2016-8610 gnutls: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]↗2016-10-26
▶
Bugzilla
CVE-2016-8610 mingw-openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]↗2016-10-26
▶
Bugzilla
CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS↗2016-10-14
▶