Description
The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.
Remediation
References
Related Vulnerabilities
WordPress Plugin BackWPup Cross-Site Scripting (3.0.12)
WordPress Plugin WP Fastest Cache SQL Injection (0.8.7.4)
Oracle Database Server CVE-2011-0832 Vulnerability (CVE-2011-0832)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (5.7)
Oracle Database Server CVE-2010-0901 Vulnerability (CVE-2010-0901)