Vulnerabilities > Openssl > Openssl > 1.1.0b

DATE CVE VULNERABILITY TITLE RISK
2017-05-04 CVE-2016-7054 Improper Access Control vulnerability in Openssl 1.1.0/1.1.0A/1.1.0B
In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads.
network
low complexity
openssl CWE-284
5.0
5.0
2017-05-04 CVE-2016-7053 NULL Pointer Dereference vulnerability in Openssl 1.1.0/1.1.0A/1.1.0B
In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference.
network
low complexity
openssl CWE-476
5.0
5.0