CVEvulnerability
CVE-2016-8610
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-11-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-400
Description
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
Affected configurations
• openssl openssl (>= 1.0.2 <= 1.0.2h)
• openssl openssl 0.9.8
• openssl openssl 1.0.1
• openssl openssl 1.1.0
• debian debian linux 8.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.3
• redhat enterprise linux server aus 7.4
• redhat enterprise linux server aus 7.6
• redhat enterprise linux server eus 7.3
• redhat enterprise linux server eus 7.4
• redhat enterprise linux server eus 7.5
• redhat enterprise linux server eus 7.6
• redhat enterprise linux server tus 7.3
• redhat enterprise linux server tus 7.6
• redhat enterprise linux workstation 6.0
• redhat enterprise linux workstation 7.0
• redhat jboss enterprise application platform 6.0.0
• redhat jboss enterprise application platform 6.4.0
• netapp cn1610 firmware
• netapp clustered data ontap antivirus connector
• netapp data ontap
• netapp data ontap edge
• netapp e-series santricity os controller (>= 11.0 <= 11.40)
• netapp host agent
• netapp oncommand balance
• netapp oncommand unified manager
• netapp oncommand workflow automation
• netapp ontap select deploy
• netapp service processor
• netapp smi-s provider
• netapp snapcenter server
• netapp snapdrive
• netapp storagegrid
• netapp storagegrid webscale
• netapp clustered data ontap
• paloaltonetworks pan-os (<= 6.1.17)
• paloaltonetworks pan-os (>= 7.0.0 <= 7.0.15)
• paloaltonetworks pan-os (>= 7.1.0 <= 7.1.10)
• oracle adaptive access manager 11.1.2.3.0
• oracle application testing suite 13.3.0.1
• oracle communications analytics 12.1.1
• oracle communications ip service activator 7.3.4
• oracle communications ip service activator 7.4.0
• oracle core rdbms 11.2.0.4
• oracle core rdbms 12.1.0.2
• oracle core rdbms 12.2.0.1
• oracle core rdbms 18c
• oracle core rdbms 19c
• oracle enterprise manager ops center 12.3.3
• oracle enterprise manager ops center 12.4.0
• oracle goldengate application adapters 12.3.2.1.0
• oracle jd edwards enterpriseone tools 9.2
• oracle peoplesoft enterprise peopletools 8.56
• oracle peoplesoft enterprise peopletools 8.57
• oracle peoplesoft enterprise peopletools 8.58
• oracle retail predictive application server 15.0.3
… and 18 more
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://rhn.redhat.com/errata/RHSA-2017-0286.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0574.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-1415.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-1659.html Third Party Advisory
- http://seclists.org/oss-sec/2016/q4/224 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/93841 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037084 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1413 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1414 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1658 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1801 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1802 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2493 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2494 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610 Issue Tracking, Patch, Third Party Advisory
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401 Broken Link
- https://security.360.cn/cve/CVE-2016-8610/ Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171130-0001/ Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2016-8610 Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us Third Party Advisory
- https://www.debian.org/security/2017/dsa-3773 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0286.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0574.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-1415.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-1659.html Third Party Advisory
- http://seclists.org/oss-sec/2016/q4/224 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/93841 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037084 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1413 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1414 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1658 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1801 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1802 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2493 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2494 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610 Issue Tracking, Patch, Third Party Advisory
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401 Broken Link
- https://security.360.cn/cve/CVE-2016-8610/ Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171130-0001/ Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2016-8610 Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us Third Party Advisory
- https://www.debian.org/security/2017/dsa-3773 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch, Third Party Advisory