CVE-2014-0221

MEDIUM · 4.3 CVSS Gepubliceerd: 05-06-2014

Beschrijving

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

Vendors

Openssl Redhat Fedoraproject Mariadb Opensuse Suse

Affected products

Openssl Storage Fedora Enterprise Linux Mariadb Leap Opensuse Linux Enterprise Desktop Linux Enterprise Server Linux Enterprise Software Development Kit Linux Enterprise Workstation Extension

Beschrijving

Vendors

Affected products

References