CVE-2016-7054 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Denial of service |
| Description | TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a denial of service attack via application crash by corrupting larger payloads. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-144 | lib32-openssl | 1:1.1.0.a-1 | 1:1.1.0.c-1 | High | Not affected | |
| AVG-143 | openssl | 1.1.0.a-1 | 1.1.0.c-1 | High | Not affected |
| References |
|---|
https://www.openssl.org/news/secadv/20161110.txt |
| Notes |
|---|
This issue does not affect OpenSSL versions prior to 1.1.0 |