Description

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

Remediation

References

CVE-2014-0221

Related Vulnerabilities

WordPress Plugin WordPress Meta Robots SQL Injection (2.1)

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-36392)

WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Multiple Vulnerabilities (4.11.33)

WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (1.8.1)

Ruby on Rails Resource Management Errors Vulnerability (CVE-2015-7581)

Severity

Medium

Classification

CVE-2014-0221

Tags

Missing Update Known Vulnerabilities