CVE-2014-3505 in OpenSSL
Summary
Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/14/2014
Disclosure
08/13/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67300 | OpenSSL DTLS Packet double free | 415 | Not defined | Official fix | CVE-2014-3505 |