2017-10-16 12:31:07 -04:00
{
2019-03-18 05:57:25 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"DATE_PUBLIC" : "2016-10-24T00:00:00" ,
"ID" : "CVE-2016-8610" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "OpenSSL" ,
"version" : {
"version_data" : [
{
"version_value" : "All 0.9.8"
} ,
{
"version_value" : "All 1.0.1"
} ,
{
"version_value" : "1.0.2 through 1.0.2h"
} ,
{
"version_value" : "1.1.0"
}
]
}
}
]
} ,
"vendor_name" : "OpenSSL"
}
2017-11-13 16:40:10 -05:00
]
2019-03-18 05:57:25 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-400"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "93841" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/93841"
} ,
{
"name" : "RHSA-2017:1659" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
} ,
{
"name" : "RHSA-2017:1658" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:1658"
} ,
{
"name" : "https://security.netapp.com/advisory/ntap-20171130-0001/" ,
"refsource" : "CONFIRM" ,
"url" : "https://security.netapp.com/advisory/ntap-20171130-0001/"
} ,
{
"name" : "RHSA-2017:1801" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:1801"
} ,
{
"name" : "RHSA-2017:0286" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
} ,
{
"name" : "RHSA-2017:1413" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:1413"
} ,
{
"name" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/87" ,
"refsource" : "CONFIRM" ,
"url" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/87"
} ,
{
"name" : "RHSA-2017:2494" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:2494"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
} ,
{
"name" : "FreeBSD-SA-16:35" ,
"refsource" : "FREEBSD" ,
"url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
} ,
{
"name" : "RHSA-2017:1414" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:1414"
} ,
{
"name" : "[oss-security] 20161024 CVE-2016-8610: SSL Death Alert: OpenSSL SSL/TLS SSL3_AL_WARNING undefined alert Remote DoS" ,
"refsource" : "MLIST" ,
"url" : "http://seclists.org/oss-sec/2016/q4/224"
} ,
{
"name" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=af58be768ebb690f78530f796e92b8ae5c9a4401" ,
"refsource" : "CONFIRM" ,
"url" : "https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=af58be768ebb690f78530f796e92b8ae5c9a4401"
} ,
{
"name" : "https://security.360.cn/cve/CVE-2016-8610/" ,
"refsource" : "MISC" ,
"url" : "https://security.360.cn/cve/CVE-2016-8610/"
} ,
{
"name" : "RHSA-2017:0574" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
} ,
{
"name" : "DSA-3773" ,
"refsource" : "DEBIAN" ,
"url" : "https://www.debian.org/security/2017/dsa-3773"
} ,
{
"name" : "RHSA-2017:1415" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
} ,
{
"name" : "1037084" ,
"refsource" : "SECTRACK" ,
"url" : "http://www.securitytracker.com/id/1037084"
} ,
{
"name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us" ,
"refsource" : "CONFIRM" ,
"url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us"
} ,
{
"name" : "RHSA-2017:1802" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:1802"
} ,
{
"name" : "RHSA-2017:2493" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:2493"
}
]
}
}
