| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 0.9.8= 0.9.8a= 0.9.8b= 0.9.8c= 0.9.8d= 0.9.8e= 0.9.8f= 0.9.8g= 0.9.8h= 0.9.8i= 0.9.8j= 0.9.8k= 0.9.8l= 0.9.8m= 0.9.8n= 0.9.8o= 0.9.8p= 0.9.8q= 0.9.8r= 0.9.8s= 0.9.8t= 0.9.8u= 0.9.8v= 0.9.8w= 0.9.8x= 0.9.8y= 0.9.8za= 1.0.0= 1.0.0a= 1.0.0b= 1.0.0c= 1.0.0d= 1.0.0e= 1.0.0f= 1.0.0g= 1.0.0h= 1.0.0i= 1.0.0j= 1.0.0k= 1.0.0l= 1.0.0m= 1.0.1= 1.0.1a= 1.0.1b= 1.0.1c= 1.0.1d= 1.0.1e= 1.0.1f= 1.0.1g= 1.0.1h |
Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free