SecuritySpace - CVE-2016-7054

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-7054

Description: In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-7054
BugTraq ID: 94238
http://www.securityfocus.com/bid/94238
https://www.exploit-db.com/exploits/40899/
http://www.securitytracker.com/id/1037261

CVE ID:	CVE-2016-7054
Description:	In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7054 BugTraq ID: 94238 http://www.securityfocus.com/bid/94238 https://www.exploit-db.com/exploits/40899/ http://www.securitytracker.com/id/1037261