Lucene search

K
nessusTenable9971.PRM
HistoryFeb 22, 2017 - 12:00 a.m.

OpenSSL 1.1.0 < 1.1.0e DoS

2017-02-2200:00:00
Tenable
www.tenable.com
12

According to its banner, the version of OpenSSL on the remote host is version 1.1.0 prior to 1.1.0e and is affected by a flaw that is triggered when handling renegotiation handshakes where the β€˜Encrypt-Then-Mac’ extension is negotiated when it was not in the initial handshake, or vice versa. This may allow a remote attacker to cause OpenSSL to crash.

Binary data 9971.prm
VendorProductVersionCPE
opensslopensslcpe:/a:openssl:openssl