296,172
Total vulnerabilities in the database
In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.
| Software | From | Fixed in |
|---|---|---|
| openssl / openssl | 1.1.0b | 1.1.0b.x |
| openssl / openssl | 1.1.0 | 1.1.0.x |
| openssl / openssl | 1.1.0a | 1.1.0a.x |