Description

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

Remediation

References

CVE-2014-0221

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34257)

Django Uncontrolled Resource Consumption Vulnerability (CVE-2019-14233)

PHP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-0568)

WordPress 4.4.x Directory Traversal (4.4 - 4.4.32)

WordPress Plugin Opal Estate Cross-Site Request Forgery (1.6.11)

Severity

Medium

Classification

CVE-2014-0221

Tags

Missing Update Known Vulnerabilities