Description
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2950-1 | openssl security update |
Debian DSA |
DSA-2950-2 | openssl update |
Ubuntu USN |
USN-2232-1 | OpenSSL vulnerabilities |
References
History
No history.
Subscriptions
Fedoraproject
Subscribe
Fedora
Subscribe
Mariadb
Subscribe
Mariadb
Subscribe
Openssl
Subscribe
Openssl
Subscribe
Opensuse
Subscribe
Leap
Subscribe
Opensuse
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Web Server
Subscribe
Storage
Subscribe
Suse
Subscribe
Linux Enterprise Desktop
Subscribe
Linux Enterprise Server
Subscribe
Linux Enterprise Software Development Kit
Subscribe
Linux Enterprise Workstation Extension
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T09:05:39.372Z
Reserved: 2013-12-03T00:00:00.000Z
Link: CVE-2014-0221
No data.
Status : Deferred
Published: 2014-06-05T21:55:06.207
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-0221
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN