« List of all CVEs

CVE-2016-7054

ChaCha20/Poly1305 heap-buffer-overflow

Published: 5/4/2017 Last updated: 9/17/2024 Reserved: 8/23/2016

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

CNA assigner: openssl (3a12439a-ef3a-4c79-92e6-6081a721f1e5) Requested by: n/a

Opam packages affected (6)

conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl conf-srt-openssl

Products affected (1)

Product Vendor Version
OpenSSL OpenSSL n/a

References (10)

Credits (1)