CVE-2016-8610

EPSS 39.66%
Veröffentlicht 13.11.2017 22:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 31

NVD 78 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

OpenSSL ≫ OpenSSL Version >= 1.0.2 <= 1.0.2h

OpenSSL ≫ OpenSSL Version 0.9.8

OpenSSL ≫ OpenSSL Version 1.0.1

OpenSSL ≫ OpenSSL Version 1.1.0

Debian ≫ Debian Linux Version 8.0

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Server Aus Version 7.3

Redhat ≫ Enterprise Linux Server Aus Version 7.4

Redhat ≫ Enterprise Linux Server Aus Version 7.6

Redhat ≫ Enterprise Linux Server Eus Version 7.3

Redhat ≫ Enterprise Linux Server Eus Version 7.4

Redhat ≫ Enterprise Linux Server Eus Version 7.5

Redhat ≫ Enterprise Linux Server Eus Version 7.6

Redhat ≫ Enterprise Linux Server Tus Version 7.3

Redhat ≫ Enterprise Linux Server Tus Version 7.6

Redhat ≫ Enterprise Linux Workstation Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Redhat ≫ Jboss Enterprise Application Platform Version 6.0.0

Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Jboss Enterprise Application Platform Version 6.4.0

Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0

Netapp ≫ Cn1610 Firmware Version -

Netapp ≫ Cn1610 Version -

Netapp ≫ Clustered Data Ontap Antivirus Connector Version -

Netapp ≫ Data Ontap Version - SwPlatform 7-mode

Netapp ≫ Data Ontap Edge Version -

Netapp ≫ E-series Santricity Os Controller Version >= 11.0 <= 11.40

Netapp ≫ Host Agent Version -

Netapp ≫ Oncommand Balance Version -

Netapp ≫ Oncommand Unified Manager Version - SwPlatform 7-mode

Netapp ≫ Oncommand Workflow Automation Version -

Netapp ≫ Ontap Select Deploy Version -

Netapp ≫ Service Processor Version -

Netapp ≫ Smi-s Provider Version -

Netapp ≫ Snapcenter Server Version -

Netapp ≫ Snapdrive Version - SwPlatform unix

Netapp ≫ Storagegrid Version -

Netapp ≫ Storagegrid Webscale Version -

Netapp ≫ Clustered Data Ontap Version -

Paloaltonetworks ≫ Pan-os Version <= 6.1.17

Paloaltonetworks ≫ Pan-os Version >= 7.0.0 <= 7.0.15

Paloaltonetworks ≫ Pan-os Version >= 7.1.0 <= 7.1.10

Oracle ≫ Adaptive Access Manager Version 11.1.2.3.0

Oracle ≫ Application Testing Suite Version 13.3.0.1

Oracle ≫ Communications Analytics Version 12.1.1

Oracle ≫ Communications Ip Service Activator Version 7.3.4

Oracle ≫ Communications Ip Service Activator Version 7.4.0

Oracle ≫ Core Rdbms Version 11.2.0.4

Oracle ≫ Core Rdbms Version 12.1.0.2

Oracle ≫ Core Rdbms Version 12.2.0.1

Oracle ≫ Core Rdbms Version 18c

Oracle ≫ Core Rdbms Version 19c

Oracle ≫ Enterprise Manager Ops Center Version 12.3.3

Oracle ≫ Enterprise Manager Ops Center Version 12.4.0

Oracle ≫ Goldengate Application Adapters Version 12.3.2.1.0

Oracle ≫ Jd Edwards Enterpriseone Tools Version 9.2

Oracle ≫ Peoplesoft Enterprise Peopletools Version 8.56

Oracle ≫ Peoplesoft Enterprise Peopletools Version 8.57

Oracle ≫ Peoplesoft Enterprise Peopletools Version 8.58

Oracle ≫ Retail Predictive Application Server Version 15.0.3

Oracle ≫ Retail Predictive Application Server Version 16.0.3

Oracle ≫ Timesten In-memory Database Version < 18.1.4.1.0

Oracle ≫ Weblogic Server Version 10.3.6.0.0

Oracle ≫ Weblogic Server Version 12.1.3.0.0

Oracle ≫ Weblogic Server Version 12.2.1.3.0

Oracle ≫ Weblogic Server Version 12.2.1.4.0

Fujitsu ≫ M10-1 Firmware Version < xcp2361

Fujitsu ≫ M10-1 Version -

Fujitsu ≫ M10-1 Firmware Version >= xcp3000 < xcp3070

Fujitsu ≫ M10-1 Version -

Fujitsu ≫ M10-4 Firmware Version < xcp2361

Fujitsu ≫ M10-4 Version -

Fujitsu ≫ M10-4 Firmware Version >= xcp3000 < xcp3070

Fujitsu ≫ M10-4 Version -

Fujitsu ≫ M10-4s Firmware Version < xcp2361

Fujitsu ≫ M10-4s Version -

Fujitsu ≫ M10-4s Firmware Version >= xcp3000 < xcp3070

Fujitsu ≫ M10-4s Version -

Fujitsu ≫ M12-1 Firmware Version < xcp2361

Fujitsu ≫ M12-1 Version -

Fujitsu ≫ M12-1 Firmware Version >= xcp3000 < xcp3070

Fujitsu ≫ M12-1 Version -

Fujitsu ≫ M12-2 Firmware Version < xcp2361

Fujitsu ≫ M12-2 Version -

Fujitsu ≫ M12-2 Firmware Version >= xcp3000 < xcp3070

Fujitsu ≫ M12-2 Version -

Fujitsu ≫ M12-2s Firmware Version < xcp2361

Fujitsu ≫ M12-2s Version -

Fujitsu ≫ M12-2s Firmware Version >= xcp3000 < xcp3070

Fujitsu ≫ M12-2s Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	39.66%	0.984

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://www.oracle.com/security-alerts/cpujan2020.html

Patch

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Patch

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-1659.html

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1658

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-1415.html

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1413

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1414

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1801

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1802

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2493

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2494

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0574.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0286.html

Third Party Advisory

http://seclists.org/oss-sec/2016/q4/224

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/93841

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1037084

Third Party Advisory

VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610

Patch

Third Party Advisory

Issue Tracking

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401

Broken Link

https://security.360.cn/cve/CVE-2016-8610/

Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc

Third Party Advisory

https://security.netapp.com/advisory/ntap-20171130-0001/

Third Party Advisory

https://security.paloaltonetworks.com/CVE-2016-8610

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us

Third Party Advisory

https://www.debian.org/security/2017/dsa-3773

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-8610

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-8610

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-8610

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-8610