Description
d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Facebook SQL Injection (1.0.8)
Joomla Deserialization of Untrusted Data Vulnerability (CVE-2019-7743)
WordPress Plugin Connections Business Directory Cross-Site Scripting (8.5.8)
WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (2.2.6)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-7836)