CVE-2016-8610
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 39.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 39.66% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- openssl/openssl · debian/debian linux · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · redhat/jboss enterprise application platform · netapp/cn1610 firmware · netapp/clustered data ontap antivirus connector · netapp/data ontap · netapp/data ontap edge · netapp/e-series santricity os controller · netapp/host agent · netapp/oncommand balance · netapp/oncommand unified manager · netapp/oncommand workflow automation · netapp/ontap select deploy · netapp/service processor · +25 more
- Source
- secalert@redhat.com
EPSS 39.7% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://rhn.redhat.com/errata/RHSA-2017-0286.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0574.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-1415.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-1659.htmlThird Party Advisory
- http://seclists.org/oss-sec/2016/q4/224Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/93841Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037084Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1413Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1414Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1658Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1801Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1802Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2493Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:2494Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610Issue Tracking, Patch, Third Party Advisory
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401Broken Link
- https://security.360.cn/cve/CVE-2016-8610/Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.ascThird Party Advisory
- https://security.netapp.com/advisory/ntap-20171130-0001/Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2016-8610Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_usThird Party Advisory
- https://www.debian.org/security/2017/dsa-3773Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.htmlPatch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.htmlPatch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.htmlPatch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlPatch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlPatch, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0286.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0574.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.