2017-10-16 12:31:07 -04:00
{
2023-02-12 23:01:30 +00:00
"data_version" : "4.0" ,
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
2020-04-16 19:01:56 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2016-8610" ,
2023-02-12 23:01:30 +00:00
"ASSIGNER" : "secalert@redhat.com" ,
2020-04-16 19:01:56 +00:00
"STATE" : "PUBLIC"
2019-03-18 05:57:25 +00:00
} ,
2023-02-12 23:01:30 +00:00
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-400" ,
"cweId" : "CWE-400"
}
]
}
]
} ,
2020-04-16 19:01:56 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
2019-03-18 05:57:25 +00:00
{
2023-02-12 23:01:30 +00:00
"vendor_name" : "OpenSSL" ,
2020-04-16 19:01:56 +00:00
"product" : {
"product_data" : [
2019-03-18 05:57:25 +00:00
{
2020-04-16 19:01:56 +00:00
"product_name" : "OpenSSL" ,
"version" : {
"version_data" : [
2019-03-18 05:57:25 +00:00
{
2023-02-12 23:01:30 +00:00
"version_affected" : "=" ,
2020-04-16 19:01:56 +00:00
"version_value" : "All 0.9.8"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"version_affected" : "=" ,
2020-04-16 19:01:56 +00:00
"version_value" : "All 1.0.1"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"version_affected" : "=" ,
2020-04-16 19:01:56 +00:00
"version_value" : "1.0.2 through 1.0.2h"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"version_affected" : "=" ,
2020-04-16 19:01:56 +00:00
"version_value" : "1.1.0"
2019-03-18 05:57:25 +00:00
}
]
}
}
]
2023-02-12 23:01:30 +00:00
}
2019-03-18 05:57:25 +00:00
}
2017-11-13 16:40:10 -05:00
]
2019-03-18 05:57:25 +00:00
}
} ,
2020-04-16 19:01:56 +00:00
"references" : {
"reference_data" : [
2019-03-18 05:57:25 +00:00
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.oracle.com/security-alerts/cpuapr2020.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpuapr2020.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.oracle.com/security-alerts/cpujul2020.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpujul2020.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.oracle.com/security-alerts/cpujan2020.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpujan2020.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://security.360.cn/cve/CVE-2016-8610/" ,
"refsource" : "MISC" ,
"name" : "https://security.360.cn/cve/CVE-2016-8610/"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.oracle.com/security-alerts/cpuoct2020.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/security-alerts/cpuoct2020.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://rhn.redhat.com/errata/RHSA-2017-0286.html" ,
"refsource" : "MISC" ,
"name" : "http://rhn.redhat.com/errata/RHSA-2017-0286.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html" ,
"refsource" : "MISC" ,
"name" : "http://rhn.redhat.com/errata/RHSA-2017-0574.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://rhn.redhat.com/errata/RHSA-2017-1415.html" ,
"refsource" : "MISC" ,
"name" : "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://rhn.redhat.com/errata/RHSA-2017-1659.html" ,
"refsource" : "MISC" ,
"name" : "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://seclists.org/oss-sec/2016/q4/224" ,
"refsource" : "MISC" ,
"name" : "http://seclists.org/oss-sec/2016/q4/224"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://www.securityfocus.com/bid/93841" ,
"refsource" : "MISC" ,
"name" : "http://www.securityfocus.com/bid/93841"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "http://www.securitytracker.com/id/1037084" ,
"refsource" : "MISC" ,
"name" : "http://www.securitytracker.com/id/1037084"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:1413" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2017:1413"
2019-03-18 05:57:25 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:1414" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2017:1414"
2019-07-16 13:25:12 -07:00
} ,
2020-07-15 03:01:34 +00:00
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:1658" ,
2020-07-15 03:01:34 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://access.redhat.com/errata/RHSA-2017:1658"
2020-07-15 03:01:34 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:1801" ,
2020-07-15 03:01:34 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://access.redhat.com/errata/RHSA-2017:1801"
2020-07-15 03:01:34 +00:00
} ,
2019-07-16 13:25:12 -07:00
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:1802" ,
2020-04-16 19:01:56 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://access.redhat.com/errata/RHSA-2017:1802"
2019-10-15 13:33:48 -07:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:2493" ,
2020-04-16 19:01:56 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://access.redhat.com/errata/RHSA-2017:2493"
2020-01-14 15:46:23 -08:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2017:2494" ,
2020-04-16 19:01:56 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://access.redhat.com/errata/RHSA-2017:2494"
2020-02-17 17:01:41 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610" ,
"refsource" : "MISC" ,
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610"
2020-04-14 14:04:09 -07:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401" ,
"refsource" : "MISC" ,
"name" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401"
2020-07-15 03:01:34 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc" ,
"refsource" : "MISC" ,
"name" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc"
2020-07-15 03:01:34 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://security.netapp.com/advisory/ntap-20171130-0001/" ,
2020-04-16 19:01:56 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://security.netapp.com/advisory/ntap-20171130-0001/"
2020-07-15 03:01:34 +00:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://security.paloaltonetworks.com/CVE-2016-8610" ,
"refsource" : "MISC" ,
"name" : "https://security.paloaltonetworks.com/CVE-2016-8610"
2020-07-14 13:55:31 -07:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us" ,
"refsource" : "MISC" ,
"name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us"
2020-10-20 12:39:21 -07:00
} ,
{
2023-02-12 23:01:30 +00:00
"url" : "https://www.debian.org/security/2017/dsa-3773" ,
2020-10-20 22:02:32 +00:00
"refsource" : "MISC" ,
2023-02-12 23:01:30 +00:00
"name" : "https://www.debian.org/security/2017/dsa-3773"
2019-03-18 05:57:25 +00:00
}
]
}
}