Description
In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2011-2239 Vulnerability (CVE-2011-2239)
Python Integer Overflow or Wraparound Vulnerability (CVE-2010-1449)
WordPress Plugin Snazzy Archives Cross-Site Scripting (1.7.1)
Squid Use After Free Vulnerability (CVE-2023-49288)
WordPress Plugin Simple Slide Show TimThumb Arbitrary File Upload (1.0)