CVE-2016-8610
published 2017-11-13CVE-2016-8610: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets…
PriorityP353high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
39.66%
98.5th percentile
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | openssl | < openssl 1.0.2j-1 (bookworm) | openssl 1.0.2j-1 (bookworm) |
| fujitsu | m10-1_firmware | < xcp2361 | xcp2361 |
| fujitsu | m10-1_firmware | >= xcp3000 < xcp3070 | xcp3070 |
| fujitsu | m10-4_firmware | < xcp2361 | xcp2361 |
| fujitsu | m10-4_firmware | >= xcp3000 < xcp3070 | xcp3070 |
| fujitsu | m10-4s_firmware | < xcp2361 | xcp2361 |
| fujitsu | m10-4s_firmware | >= xcp3000 < xcp3070 | xcp3070 |
| fujitsu | m12-1_firmware | < xcp2361 | xcp2361 |
| fujitsu | m12-1_firmware | >= xcp3000 < xcp3070 | xcp3070 |
| fujitsu | m12-2_firmware | < xcp2361 | xcp2361 |
| fujitsu | m12-2_firmware | >= xcp3000 < xcp3070 | xcp3070 |
| fujitsu | m12-2s_firmware | < xcp2361 | xcp2361 |
| fujitsu | m12-2s_firmware | >= xcp3000 < xcp3070 | xcp3070 |
| netapp | e-series_santricity_os_controller | 11.0 – 11.40 | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | >= 0 < 1.0.2j-1 | 1.0.2j-1 |
| openssl | openssl | >= 0 < 1.0.2j-1 | 1.0.2j-1 |
| openssl | openssl | >= 0 < 1.0.2j-1 | 1.0.2j-1 |
| openssl | openssl | >= 0 < 1.0.2j-1 | 1.0.2j-1 |
Detection & IOCsextracted from sources · hover to see the quote
snort↗
1:40843
- →The attack involves sending a large volume of SSL ALERT packets during a TLS/SSL handshake to exhaust CPU on the target server. Detection should focus on abnormally high rates of TLS/SSL ALERT messages from a single source IP. ↗
- →Snort rule 1:40843 can be used to detect and block exploitation of CVE-2016-8610 (SSL Death Alert DoS). Ensure this rule is enabled in your Snort default policy set. ↗
- →The vulnerability is exploitable during the TLS/SSL connection handshake phase via malformed plain-text ALERT packets. Monitor for excessive CPU consumption on TLS-terminating services (e.g., Nginx) as a potential indicator of active exploitation. ↗
- ·Apache httpd is NOT affected by this issue; Nginx IS affected. Detection and mitigation efforts should be prioritized on Nginx and other applications compiled against OpenSSL or GnuTLS that do not allocate an extra thread for processing ClientHello messages. ↗
- ·Firewall-level mitigation is possible by rate-limiting connections per IP or using deep packet inspection to reject malicious ALERT packets, which can reduce exposure even on unpatched systems. ↗
- ·PAN-OS versions 6.1.17 and earlier, 7.0.15 and earlier, and 7.1.10 and earlier are affected. Ensure PAN-OS is updated to 6.1.18+, 7.0.16+, or 7.1.11+ respectively. ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv9.8CRITICAL
vendor_ubuntu9.8CRITICAL
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
OpenSSL Vulnerability
vendor_paloalto·2017-06-07·CVSS 7.5
CVE-2016-8610 [HIGH] CWE-400 OpenSSL Vulnerability
OpenSSL Vulnerability
The OpenSSL library has been found to contain vulnerability CVE-2016-8610. Palo Alto Networks software makes use of the vulnerable library and may be affected. (Ref # PAN-68543 / CVE-2016-8610)
The OpenSSL library in use by PAN-OS is patched on a regular basis.
This issue affects PAN-OS 6.1.17 and earlier, PAN-OS 7.0.15 and earlier, PAN-OS 7.1.10 and earlier
Affected products: PAN-OS
Solution: PAN-OS 6.1.18 and later, PAN-OS 7.0.16 and later, PAN-OS 7.1.11 and later
Workaround: N/A
Ubuntu
GnuTLS vulnerability
vendor_ubuntu·2017-03-20·CVSS 7.5
CVE-2016-8610 [HIGH] GnuTLS vulnerability
Title: GnuTLS vulnerability
Summary: GnuTLS could be made to hang if it received specially crafted network
traffic.
USN-3183-1 fixed CVE-2016-8610 in GnuTLS in Ubuntu 16.04 LTS and Ubuntu
16.10. This update provides the corresponding update for Ubuntu 12.04 LTS
and Ubuntu 14.04 LTS.
Original advisory details:
Stefan Buehler discovered that GnuTLS incorrectly verified the serial
length of OCSP responses. A remote attacker could possibly use this issue
to bypass certain certificate validation measures. This issue only applied
to Ubuntu 16.04 LTS. (CVE-2016-7444)
Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts.
A remote attacker could possibly use this issue to cause GnuTLS to hang,
resulting in a denial of service. This issue has only been addressed in
Ubuntu 1
Ubuntu
GnuTLS vulnerabilities
vendor_ubuntu·2017-02-01·CVSS 7.5
CVE-2016-7444 [HIGH] GnuTLS vulnerabilities
Title: GnuTLS vulnerabilities
Summary: Several security issues were fixed in GnuTLS.
Stefan Buehler discovered that GnuTLS incorrectly verified the serial
length of OCSP responses. A remote attacker could possibly use this issue
to bypass certain certificate validation measures. This issue only applied
to Ubuntu 16.04 LTS. (CVE-2016-7444)
Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts.
A remote attacker could possibly use this issue to cause GnuTLS to hang,
resulting in a denial of service. This issue has only been addressed in
Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)
It was discovered that GnuTLS incorrectly decoded X.509 certificates with a
Proxy Certificate Information extension. A remote attacker could use this
issue to cause GnuTLS to crash, re
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2017-01-31·CVSS 9.8
CVE-2016-2177 [CRITICAL] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
Guido Vranken discovered that OpenSSL used undefined behaviour when
performing pointer arithmetic. A remote attacker could possibly use this
issue to cause OpenSSL to crash, resulting in a denial of service. This
issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other
releases were fixed in a previous security update. (CVE-2016-2177)
It was discovered that OpenSSL did not properly handle Montgomery
multiplication, resulting in incorrect results leading to transient
failures. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10.
(CVE-2016-7055)
It was discovered that OpenSSL did not properly use constant-time
operations when performing ECDSA P-256 signing. A remote attacker could
BSD
FreeBSD-SA-16:35.openssl: OpenSSL Remote DoS vulnerability
bsd_advisories·2016-11-02·CVSS 7.5
CVE-2016-8610 [HIGH] FreeBSD-SA-16:35.openssl: OpenSSL Remote DoS vulnerability
FreeBSD-SA-16:35.openssl Security Advisory
The FreeBSD Project
Topic: OpenSSL Remote DoS vulnerability
Category: contrib
Module: openssl
Announced: 2016-11-02
Affects: FreeBSD 9.x and FreeBSD 10.x.
Corrected: 2016-11-02 07:09:31 UTC (stable/10, 10.3-STABLE)
2016-11-02 07:23:36 UTC (releng/10.3, 10.3-RELEASE-p12)
2016-11-02 07:24:14 UTC (releng/10.2, 10.2-RELEASE-p25)
2016-11-02 07:24:14 UTC (releng/10.1, 10.1-RELEASE-p42)
2016-11-02 07:09:31 UTC (stable/9, 9.3-STABLE)
2016-11-02 07:24:34 UTC (releng/9.3, 9.3-RELEASE-p50)
CVE Name: CVE-2016-8610
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit .
I. Background
FreeBSD includes software from the OpenSSL Project. The OpenS
Red Hat
SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
vendor_redhat·2016-10-24·CVSS 7.5
CVE-2016-8610 [HIGH] SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
Statement: This flaw affects applications that are compiled against OpenSSL or GnuTLS and do not allocate a
Debian
CVE-2016-8610: openssl - A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h...
vendor_debian·2016·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610: openssl - A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h...
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
Scope: local
bookworm: resolved (fixed in 1.0.2j-1)
bullseye: resolved (fixed in 1.0.2j-1)
forky: resolved (fixed in 1.0.2j-1)
sid: resolved (fixed in 1.0.2j-1)
trixie: resolved (fixed in 1.0.2j-1)
GHSA
GHSA-v2q2-jxh8-m5h8: A denial of service flaw was found in OpenSSL 0
ghsa_unreviewed·2022-05-13
CVE-2016-8610 [HIGH] CWE-400 GHSA-v2q2-jxh8-m5h8: A denial of service flaw was found in OpenSSL 0
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
OSV
CVE-2016-8610: A denial of service flaw was found in OpenSSL 0
osv·2017-11-13·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610: A denial of service flaw was found in OpenSSL 0
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
OSV
gnutls26 vulnerability
osv·2017-03-20·CVSS 7.5
CVE-2016-8610 [HIGH] gnutls26 vulnerability
gnutls26 vulnerability
USN-3183-1 fixed CVE-2016-8610 in GnuTLS in Ubuntu 16.04 LTS and Ubuntu
16.10. This update provides the corresponding update for Ubuntu 12.04 LTS
and Ubuntu 14.04 LTS.
Original advisory details:
Stefan Buehler discovered that GnuTLS incorrectly verified the serial
length of OCSP responses. A remote attacker could possibly use this issue
to bypass certain certificate validation measures. This issue only applied
to Ubuntu 16.04 LTS. (CVE-2016-7444)
Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts.
A remote attacker could possibly use this issue to cause GnuTLS to hang,
resulting in a denial of service. This issue has only been addressed in
Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)
It was discovered that GnuTLS incorrectly decoded
OSV
gnutls26, gnutls28 vulnerabilities
osv·2017-02-01·CVSS 7.5
CVE-2016-7444 [HIGH] gnutls26, gnutls28 vulnerabilities
gnutls26, gnutls28 vulnerabilities
Stefan Buehler discovered that GnuTLS incorrectly verified the serial
length of OCSP responses. A remote attacker could possibly use this issue
to bypass certain certificate validation measures. This issue only applied
to Ubuntu 16.04 LTS. (CVE-2016-7444)
Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts.
A remote attacker could possibly use this issue to cause GnuTLS to hang,
resulting in a denial of service. This issue has only been addressed in
Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)
It was discovered that GnuTLS incorrectly decoded X.509 certificates with a
Proxy Certificate Information extension. A remote attacker could use this
issue to cause GnuTLS to crash, resulting in a denial of service, or
possibly execute
OSV
openssl vulnerabilities
osv·2017-01-31·CVSS 9.8
CVE-2016-2177 [CRITICAL] openssl vulnerabilities
openssl vulnerabilities
Guido Vranken discovered that OpenSSL used undefined behaviour when
performing pointer arithmetic. A remote attacker could possibly use this
issue to cause OpenSSL to crash, resulting in a denial of service. This
issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other
releases were fixed in a previous security update. (CVE-2016-2177)
It was discovered that OpenSSL did not properly handle Montgomery
multiplication, resulting in incorrect results leading to transient
failures. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10.
(CVE-2016-7055)
It was discovered that OpenSSL did not properly use constant-time
operations when performing ECDSA P-256 signing. A remote attacker could
possibly use this issue to perform a timing attack and recover
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-8610 openssl101e: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [epel-5]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610 openssl101e: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [epel-5]
CVE-2016-8610 openssl101e: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
[bug automatical
Bugzilla
CVE-2016-8610 openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610 openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
CVE-2016-8610 openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affe
Bugzilla
CVE-2016-8610 gnutls: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610 gnutls: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
CVE-2016-8610 gnutls: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affec
Bugzilla
CVE-2016-8610 mingw-openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
bugzilla·2016-10-26·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610 mingw-openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
CVE-2016-8610 mingw-openssl: SSL/TLS libraries: Malformed plain-text ALERT packets could cause remote DoS [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issu
Bugzilla
CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
bugzilla·2016-10-14·CVSS 7.5
CVE-2016-8610 [HIGH] CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
CVE-2016-8610 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
A flaw was found in the way OpenSSL processed ALERT packets during an SSL handshake. A attacker basically sends a large number of plaintext WARNING pkgs after CLIENTHELLO, which causes OpenSSL to go into a endless loop (while the attacker keeps on sending more alert packets), consequently taking 100% CPU. This may cause certain applications compiled against OpenSSL to hang and may not be able to serve content to the clients. This is specially true about for servers which do not for or allocate extra thread for the processing of ClientHello like nginx.
This is fixed in OpenSSL upstream commit via:
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=af58be768ebb690f78530f796e92b8ae5c9a4401
Discussion:
Talos
2017 in Snort Rules
blogs_talos·2018-01-29
2017 in Snort Rules
This post was written by Martin Lee and Vanja Svajcer.
2017 was an eventful year for cyber security with high profile vulnerabilities that allowed self-replicating worm attacks such as WannaCry and BadRabbit to impact organizations throughout the world. In 2017, Talos researchers discovered many new attacks including backdoors in legitimate software such as CCleaner, designed to target high tech companies as well as M.E.Doc, responsible for initial spread of Nyetya. Despite all those, headline making attacks are only a small part of the day to day protection provided by security systems.
In this post we review some of the findings created by investigating the most frequently triggered Snort rules as reported by Cisco Meraki systems and included in the Snort default policy set.
## Top 5
Talos
2017 in Snort Rules
blogs_talos·2018-01-29
2017 in Snort Rules
## 2017 in Snort Rules
This post was written by Martin Lee and Vanja Svajcer .
2017 was an eventful year for cyber security with high profile vulnerabilities that allowed self-replicating worm attacks such as WannaCry and BadRabbit to impact organizations throughout the world. In 2017, Talos researchers discovered many new attacks including backdoors in legitimate software such as CCleaner , designed to target high tech companies as well as M.E.Doc , responsible for initial spread of Nyetya . Despite all those, headline making attacks are only a small part of the day to day protection provided by security systems.
In this post we review some of the findings created by investigating the most frequently triggered Snort rules as reported by Cisco Meraki systems and included in the Snort de
Tenable
[R3] LCE 5.0.0 Fixes Multiple Third-party Library Vulnerabilities
blogs_tenable·2017-01-31
[R3] LCE 5.0.0 Fixes Multiple Third-party Library Vulnerabilities
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
http://rhn.redhat.com/errata/RHSA-2017-0286.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0574.htmlhttp://rhn.redhat.com/errata/RHSA-2017-1415.htmlhttp://rhn.redhat.com/errata/RHSA-2017-1659.htmlhttp://seclists.org/oss-sec/2016/q4/224http://www.securityfocus.com/bid/93841http://www.securitytracker.com/id/1037084https://access.redhat.com/errata/RHSA-2017:1413https://access.redhat.com/errata/RHSA-2017:1414https://access.redhat.com/errata/RHSA-2017:1658https://access.redhat.com/errata/RHSA-2017:1801https://access.redhat.com/errata/RHSA-2017:1802https://access.redhat.com/errata/RHSA-2017:2493https://access.redhat.com/errata/RHSA-2017:2494https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401https://security.360.cn/cve/CVE-2016-8610/https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.aschttps://security.netapp.com/advisory/ntap-20171130-0001/https://security.paloaltonetworks.com/CVE-2016-8610https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_ushttps://www.debian.org/security/2017/dsa-3773https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0286.htmlhttp://rhn.redhat.com/errata/RHSA-2017-0574.htmlhttp://rhn.redhat.com/errata/RHSA-2017-1415.htmlhttp://rhn.redhat.com/errata/RHSA-2017-1659.htmlhttp://seclists.org/oss-sec/2016/q4/224http://www.securityfocus.com/bid/93841http://www.securitytracker.com/id/1037084https://access.redhat.com/errata/RHSA-2017:1413https://access.redhat.com/errata/RHSA-2017:1414https://access.redhat.com/errata/RHSA-2017:1658https://access.redhat.com/errata/RHSA-2017:1801https://access.redhat.com/errata/RHSA-2017:1802https://access.redhat.com/errata/RHSA-2017:2493https://access.redhat.com/errata/RHSA-2017:2494https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401https://security.360.cn/cve/CVE-2016-8610/https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.aschttps://security.netapp.com/advisory/ntap-20171130-0001/https://security.paloaltonetworks.com/CVE-2016-8610https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_ushttps://www.debian.org/security/2017/dsa-3773https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
2017-11-13
Published