ChaCha20/Poly1305 heap-buffer-overflow

Summary

In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

Timeline

1. Dec 11, 2016Public exploit on Exploit-DB

   EDB-40899

2. May 4, 2017, 7:00 PM UTCCVE published
3. Sep 17, 2024, 12:30 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• OpenSSL OpenSSL

  openssl-1.1.0, openssl-1.1.0a, openssl-1.1.0b

References 6