Security Advisory

CVE-2016-7054

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-04 19:00:00

Last updated 2024-09-17 00:30:27

Assigner openssl

CVSS score not scored

State PUBLISHED

Description

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

← Browse all CVEs View on cve.org ↗