Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-8610

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.692
EPSS Ranking 98.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2016-8610


Contact Us

Shodan ® - All rights reserved