Description
Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.
Remediation
References
Related Vulnerabilities
Joomla Missing Authorization Vulnerability (CVE-2021-23123)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-29450)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4592)
WordPress Plugin WordPress Landing Pages Cross-Site Scripting (1.8.7)