CVE-2016-7054

ChaCha20/Poly1305 heap-buffer-overflow

published May 4, 2017

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32389 · 98.3th percentile
Published
2017-05-04T19:00Z
EPSS history
Timeline
  • 22 SEP 03:13Z
    EPSS moved 32% → 21%
    epss
  • 06 SEP 03:09Z
    EPSS moved 32% → 21%
    epss
  • 30 AUG 15:34Z
    EPSS moved 21% → 32%
    epss
  • 29 AUG 04:14Z
    EPSS moved 32% → 21%
    epss
  • 04 MAY 19:00Z
    ChaCha20/Poly1305 heap-buffer-overflow
    cvelistv5