Description
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple Banner Cross-Site Scripting (2.11.0)
Oracle JRE CVE-2013-2457 Vulnerability (CVE-2013-2457)
Internet Information Services Other Vulnerability (CVE-2003-0225)
WordPress Plugin Login Widget With Shortcode Cross-Site Request Forgery (3.1.1)
Apache HTTP Server CVE-2002-0392 Vulnerability (CVE-2002-0392)