OpenSSL CVE-2014-3507 Denial of Service Vulnerability

Description

By sending carefully crafted DTLS packets an attacker could cause openssl toleak memory. This can be exploited through a Denial of Service attack.OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zbOpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.Thanks to Adam Langley (Google) for discovering and researching thisissue. This issue was reported to OpenSSL on 6th June 2014.The fix was developed by Adam Langley.

Affected Applications

OpenSSL

CVE References

Other References