BSA-2017-205

🗓️ 31 Mar 2017 00:00:00Reported by Broadcom Security ResponseType

broadcom🔗 support.broadcom.com👁 17 Views

Severity: High - TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. OpenSSL 1.1.0 users should upgrade to 1.1.0c

Reporter	Title	Published	Views	Family All 33
0day.today	OpenSSL 1.1.0a/1.1.0b - Denial of Service Exploit	13 Dec 201600:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	26 Mar 202503:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM InfoSphere Master Data Management	27 Apr 202209:58	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source OpenSSL Vulnerabilities affect IBM Network Advisor	18 Jun 201800:34	–	ibm
FreeBSD	openssl -- multiple vulnerabilities	10 Nov 201600:00	–	freebsd
Tenable Nessus	OpenSSL 1.1.0 < 1.1.0c Multiple Vulnerabilities	18 Nov 201600:00	–	nessus
Tenable Nessus	FreeBSD : openssl -- multiple vulnerabilities (50751310-a763-11e6-a881-b499baebfeaf)	11 Nov 201600:00	–	nessus
Tenable Nessus	H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities	19 Jun 201700:00	–	nessus
Tenable Nessus	H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities	19 Jun 201700:00	–	nessus

31 Mar 2017 11:38Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

CVSS 37.5

EPSS0.24759