Test ID:	1.3.6.1.4.1.25623.1.0.107052
Category:	Denial of Service
Title:	OpenSSL SSL_peek hang on empty record DoS Vulnerability - Linux
Summary:	OpenSSL is prone to a Denial of Service (DoS) vulnerability.
Description:	Summary: OpenSSL is prone to a Denial of Service (DoS) vulnerability. Vulnerability Insight: OpenSSL suffers from the possibility of DoS attack through sending an empty record which causes SSL/TLS to hang during a call to SSL_peek(). Vulnerability Impact: Successful exploitation could result in service crash. Affected Software/OS: OpenSSL 1.1.0. Solution: OpenSSL 1.1.0 users should upgrade to 1.1.0a. CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6305 BugTraq ID: 93149 http://www.securityfocus.com/bid/93149 https://security.gentoo.org/glsa/201612-16 http://www.securitytracker.com/id/1036879 Common Vulnerability Exposure (CVE) ID: CVE-2016-6308 BugTraq ID: 93151 http://www.securityfocus.com/bid/93151 http://www.securitytracker.com/id/1036885 Common Vulnerability Exposure (CVE) ID: CVE-2016-6307 BugTraq ID: 93152 http://www.securityfocus.com/bid/93152
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.