CVE-2016-6305

The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by…

published September 26, 2016

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15997 · 96.9th percentile
Published
2016-09-26T00:00Z
EPSS history
Timeline
  • 26 SEP 00:00Z
    The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by…
    cvelistv5