CVE-2016-7054

Fixed in a distro release EPSS 32%

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

Published 2017-05-04 · CVE record · OSV

Products: OpenSSL

Distro releases