Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-7054

ChaCha20/Poly1305 heap-buffer-overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
openssl

Description

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenSSL OpenSSL

  • openssl-1.1.0affected
  • openssl-1.1.0aaffected
  • openssl-1.1.0baffected

References