| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 1.1.0= 1.1.0a= 1.1.0b |
In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free