OpenSSL is prone to a denial-of-service vulnerability caused by a NULL-pointer dereference. According to its banner, OVS has discovered that the remote Webserver is using a version prior to OpenSSL 0.9.8n which is vulnerable. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. OpenSSL versions 0.9.8m and prior are vulnerable.

Updates are available. Please see the references for more information.

• http://www.openssl.org
• http://www.openwall.com/lists/oss-security/2010/03/03/5
• http://www.securityfocus.com/archive/1/510726
• http://www.securityfocus.com/bid/38533
• https://bugzilla.redhat.com/show_bug.cgi?id=567711
• https://bugzilla.redhat.com/show_bug.cgi?id=569774

---

Updated on 2017-03-28