{"cve":"CVE-2016-8610","nvd":{"published":"2017-11-13T22:29:00.203","modified":"2026-06-17T00:54:35.887","status":"Modified","description":"A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-400"],"references":["http://rhn.redhat.com/errata/RHSA-2017-0286.html","http://rhn.redhat.com/errata/RHSA-2017-0574.html","http://rhn.redhat.com/errata/RHSA-2017-1415.html","http://rhn.redhat.com/errata/RHSA-2017-1659.html","http://seclists.org/oss-sec/2016/q4/224"],"products":["debian:debian_linux","fujitsu:m10-1_firmware","fujitsu:m10-4_firmware","fujitsu:m10-4s_firmware","fujitsu:m12-1_firmware","fujitsu:m12-2_firmware","fujitsu:m12-2s_firmware","netapp:clustered_data_ontap","netapp:clustered_data_ontap_antivirus_connector","netapp:cn1610_firmware","netapp:data_ontap","netapp:data_ontap_edge","netapp:e-series_santricity_os_controller","netapp:host_agent","netapp:oncommand_balance","netapp:oncommand_unified_manager","netapp:oncommand_workflow_automation","netapp:ontap_select_deploy","netapp:service_processor","netapp:smi-s_provider","netapp:snapcenter_server","netapp:snapdrive","netapp:storagegrid","netapp:storagegrid_webscale","openssl:openssl","oracle:adaptive_access_manager","oracle:application_testing_suite","oracle:communications_analytics","oracle:communications_ip_service_activator","oracle:core_rdbms","oracle:enterprise_manager_ops_center","oracle:goldengate_application_adapters","oracle:jd_edwards_enterpriseone_tools","oracle:peoplesoft_enterprise_peopletools","oracle:retail_predictive_application_server","oracle:timesten_in-memory_database","oracle:weblogic_server","paloaltonetworks:pan-os","redhat:enterprise_linux_desktop","redhat:enterprise_linux_server","redhat:enterprise_linux_server_aus","redhat:enterprise_linux_server_eus","redhat:enterprise_linux_server_tus","redhat:enterprise_linux_workstation","redhat:jboss_enterprise_application_platform"],"source":"nvd","synced_at":"2026-10-19T20:47:01.408438353+00:00"},"epss":{"cve":"CVE-2016-8610","score":0.39657,"percentile":0.98618,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}