Description
The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."
Remediation
References
Related Vulnerabilities
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.19)
PHP Use After Free Vulnerability (CVE-2016-9936)
Nginx Other Vulnerability (CVE-2016-0742)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4284)
WordPress Plugin Slideshow Multiple Cross-Site Scripting Vulnerabilities (2.1.14)