Security Advisory

CVE-2016-6305

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-09-26 00:00:00
Last updated 2024-08-06 01:29:19
Assigner redhat
State PUBLISHED

Description

The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.