Denial Of Service (DoS) In SSL Alert Handling

github.com/golang/go is vulnerable to denial of service DoS in SSL alert handling aka SSL-Death-Alert. The attacks are possible due to a flaw in the way that SSL3ALWARNING are handled, consuming 100% CPU on the server. This vulnerability is related to CVE-2016-8610...

BSA-2017-201

Security Advisory ID : BSA-2017-201 Component : OpenSSL Revision : 1.0: Interim It was found that function "ssl3readbytes" inssl/s3pkt.c might lead to higher CPU usage due to improper handling of warning packets.An attacker could repeat the undefined plaintext warning packets of "SSL3ALWARNING"...

OpenSSL 1.0.2 < 1.0.2j Multiple DoS

Binary data 9627.prm...