PT-2016-2766 · Openssl+11 · Openssl+14
Shi Lei
·
Publicado
2016-09-16
·
Atualizado
2024-06-15
·
CVE-2016-2181
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
OpenSSL versions prior to 1.1.0
Description
The issue is related to the Anti-Replay feature in the DTLS implementation, which mishandles early use of a new epoch number in conjunction with a large sequence number. This allows remote attackers to cause a denial of service via spoofed DTLS records. The vulnerability is related to the files rec layer d1.c and ssl3 record.c.
Recommendations
For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DTLS implementation until a patch is available.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Cisco Asa
Cisco Ios Xe
Cisco Nexus
Cisco Wls
Fortios
Freebsd
Huawei Vrp
Ibm Aix
Nessus
Openssl
Red Hat
Suse
Ubuntu