CVE-2016-8610 vulnerability in NetApp and Other Products
Published on November 13, 2017
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
NVD
Weakness Type
What is a Resource Exhaustion Vulnerability?
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
CVE-2016-8610 has been classified to as a Resource Exhaustion vulnerability or weakness.
Products Associated with CVE-2016-8610
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-8610 are published in these products:
Affected Versions
OpenSSL:- Version All 0.9.8 is affected.
- Version All 1.0.1 is affected.
- Version 1.0.2 through 1.0.2h is affected.
- Version 1.1.0 is affected.
Exploit Probability
EPSS
71.13%
Percentile
98.68%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.