NetSight
IP …
medium4.3

CVE-2014-0221

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a…

Impact

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

Affected products

VendorProductAffected versions
OpensslOpenssl
from 0.9.8 before 0.9.8za
from 1.0.0 before 1.0.0m
from 1.0.1 before 1.0.1h
RedhatStorage
Version 2.1
FedoraprojectFedora
All versions
Versions 19, 20
RedhatEnterprise Linux
Versions 5, 6.0
MariadbMariadb
from 10.0.0 before 10.0.13
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Server
Version 12
SuseLinux Enterprise Software Development Kit
Version 12
SuseLinux Enterprise Workstation Extension
Version 12

References