CVE-2016-8610

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

39.65% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 98.4% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2017-11-13 22:00Z8 YR AGO

Last updated

2024-08-06 02:27Z2 YR AGO

Reserved

2016-10-12

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-400Uncontrolled Resource ConsumptionClass

Data version

5.1

Document digest

7325e8e3af859d8de483a323f480ffc4770195cc45328aa833ef0b72c91785b5

• www.securityfocus.com93841http://www.securityfocus.com/bid/93841vdb-entryx_refsource_BID
• rhn.redhat.comRHSA-2017:1659http://rhn.redhat.com/errata/RHSA-2017-1659.htmlvendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2017:1658https://access.redhat.com/errata/RHSA-2017:1658vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2017:1801https://access.redhat.com/errata/RHSA-2017:1801vendor-advisoryx_refsource_REDHAT
• rhn.redhat.comRHSA-2017:0286http://rhn.redhat.com/errata/RHSA-2017-0286.htmlvendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2017:1413https://access.redhat.com/errata/RHSA-2017:1413vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2017:2494https://access.redhat.com/errata/RHSA-2017:2494vendor-advisoryx_refsource_REDHAT
• security.freebsd.orgFreeBSD-SA-16:35https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.ascvendor-advisoryx_refsource_FREEBSD
• access.redhat.comRHSA-2017:1414https://access.redhat.com/errata/RHSA-2017:1414vendor-advisoryx_refsource_REDHAT
• seclists.org[oss-security] 20161024 CVE-2016-8610: SSL Death Alert: OpenSSL SSL/TLS SSL3_AL_WARNING undefined alert Remote DoShttp://seclists.org/oss-sec/2016/q4/224mailing-listx_refsource_MLIST
• rhn.redhat.comRHSA-2017:0574http://rhn.redhat.com/errata/RHSA-2017-0574.htmlvendor-advisoryx_refsource_REDHAT
• www.debian.orgDSA-3773https://www.debian.org/security/2017/dsa-3773vendor-advisoryx_refsource_DEBIAN
• rhn.redhat.comRHSA-2017:1415http://rhn.redhat.com/errata/RHSA-2017-1415.htmlvendor-advisoryx_refsource_REDHAT
• www.securitytracker.com1037084http://www.securitytracker.com/id/1037084vdb-entryx_refsource_SECTRACK
• access.redhat.comRHSA-2017:1802https://access.redhat.com/errata/RHSA-2017:1802vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2017:2493https://access.redhat.com/errata/RHSA-2017:2493vendor-advisoryx_refsource_REDHAT
• www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.htmlx_refsource_MISC
• www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2020.htmlx_refsource_MISC
• www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlx_refsource_MISC
• www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlx_refsource_MISC
• www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2020.htmlx_refsource_MISC
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20171130-0001/x_refsource_CONFIRM
• bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610x_refsource_CONFIRM
• git.openssl.orghttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401x_refsource_CONFIRM
• security.360.cnhttps://security.360.cn/cve/CVE-2016-8610/x_refsource_MISC
• support.hpe.comhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_usx_refsource_CONFIRM
• security.paloaltonetworks.comhttps://security.paloaltonetworks.com/CVE-2016-8610x_refsource_CONFIRM
• www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.htmlx_refsource_MISC