A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory22 | — | — | Apr 5, 2017 | Apr 5, 2017 |
| Aix 6.1 Openssl_advisory22 | — | — | Apr 5, 2017 | Apr 5, 2017 |
| Aix 7.1 Openssl_advisory22 | — | — | Apr 5, 2017 | Apr 5, 2017 |
| Aix 7.2 Openssl_advisory22 | — | — | Apr 5, 2017 | Apr 5, 2017 |
| Amazon_linux | — | Upgrade gnutlsUpgrade openssl | Mar 7, 2017 | Nov 2, 2016 |
| Centos_linux | — | Upgrade openssl-staticUpgrade openssl-debuginfoUpgrade gnutlsUpgrade gnutls-guileUpgrade opensslUpgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade openssl-develUpgrade openssl-libsUpgrade gnutls-develUpgrade openssl-perl | Feb 22, 2017 | Nov 2, 2016 |
| Debian | — | Upgrade openssl | Jan 28, 2017 | Nov 2, 2016 |
| Freebsd | — | Upgrade opensslUpgrade FreeBSDUpgrade openssl-develUpgrade linux-c7-openssl-libsUpgrade linux-c6-openssl | Nov 14, 2016 | Nov 2, 2016 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 5, 2026 | Nov 13, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutls | Jan 18, 2018 | Nov 13, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-c++ | Jan 18, 2018 | Nov 13, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory22 | Nov 30, 2017 | Nov 13, 2017 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.12-0.175.3.14.0.4.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.10-0.175.3.14.0.4.0 on Solaris 11.3 | May 29, 2017 | May 29, 2017 |
| Oracle_linux | — | Upgrade openssl-staticUpgrade opensslUpgrade gnutls-utilsUpgrade gnutls-guileUpgrade gnutlsUpgrade gnutls-develUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-libs | Feb 21, 2017 | Oct 24, 2016 |
| Panos | — | Update PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your deviceUpgrade PAN-OS 7.0 to the latest version | Jun 8, 2017 | Nov 2, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R12Update Pulse Connect Secure to version 8.3R1Update Pulse Connect Secure to version 8.2R7 | Oct 28, 2020 | Nov 13, 2017 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Oct 24, 2016 |
| Red_hat Jboss_eap | — | — | Nov 14, 2019 | Nov 13, 2017 |
| Redhat_linux | — | Upgrade openssl-staticUpgrade openssl-debuginfoUpgrade gnutls-develUpgrade openssl-develUpgrade gnutls-utilsNo solution existsUpgrade gnutls-debuginfoUpgrade gnutlsUpgrade opensslUpgrade gnutls-guileUpgrade openssl-libsUpgrade openssl-perl | Feb 24, 2017 | Nov 2, 2016 |
| Suse | — | Upgrade libgnutls28-32bitUpgrade libopenssl1_0_0Upgrade libgnutls26-x86Upgrade compat-openssl097g-32bitUpgrade compat-openssl097gUpgrade libopenssl1_0_0-x86Upgrade libgnutls-extra-develUpgrade sles12sp1-docker-imageUpgrade openssl-docUpgrade libopenssl0_9_8Upgrade openssl1Upgrade opensslUpgrade libopenssl1_0_0-hmacUpgrade libopenssl1_0_0-32bitUpgrade libgnutls26-32bitUpgrade libgnutls28Upgrade gnutlsUpgrade libgnutls-openssl27Upgrade libgnutls-develUpgrade libopenssl0_9_8-32bitUpgrade libgnutls30Upgrade openssl1-docUpgrade libopenssl0_9_8-hmac-32bitUpgrade libgnutls26Upgrade libopenssl-develUpgrade libgnutls-dane0Upgrade libopenssl1-develUpgrade libgnutlsxx28Upgrade libopenssl0_9_8-x86Upgrade libgnutls30-hmac-32bitUpgrade libgnutls-openssl-develUpgrade libopenssl-devel-32bitUpgrade libgnutls30-32bitUpgrade libgnutlsxx-develUpgrade libgnutls30-hmacUpgrade libgnutls-extra26Upgrade libopenssl0_9_8-hmacUpgrade libopenssl1_0_0-hmac-32bit | Jan 28, 2017 | Nov 2, 2016 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libgnutls30 | Feb 1, 2017 | Nov 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub