| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 1.0.0= 1.0.0a= 1.0.0b= 1.0.0c= 1.0.0d= 1.0.0e= 1.0.0f= 1.0.0g= 1.0.0h= 1.0.0i= 1.0.0j= 1.0.1= 1.0.1a= 1.0.1b= 1.0.1c= 1.0.1d= 1.0.1e |
The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free