60
CVE-2016-6305
PoC —CVSS 3.0
7.5 high
EPSS
16%p97
Published
()
Modified
Description
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.
- Vendors
- openssl
- Products
- openssl
- Weakness
- CWE-20
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H