NetSight
IP …
medium6.8

CVE-2014-0195

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment…

Impact

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

Affected products

VendorProductAffected versions
OpensslOpenssl
from 0.9.8 before 0.9.8za
from 1.0.0 before 1.0.0m
from 1.0.1 before 1.0.1h
MariadbMariadb
from 10.0.0 before 10.0.13
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
FedoraprojectFedora
Versions 19, 20

Weakness classification

CWE-120

References