CVE-2015-0206
Published: 8 January 2015
Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
openssl Launchpad, Ubuntu, Debian |
lucid |
Not vulnerable
|
| precise |
Released
(1.0.1-4ubuntu5.21)
|
|
| trusty |
Released
(1.0.1f-1ubuntu2.8)
|
|
| upstream |
Released
(1.0.1k)
|
|
| utopic |
Released
(1.0.1f-1ubuntu9.1)
|
|
|
Patches: upstream: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=04685bc949e90a877656cf5020b6d4f90a9636a6 |
||
|
openssl098 Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
| precise |
Not vulnerable
|
|
| trusty |
Does not exist
(trusty was not-affected)
|
|
| upstream |
Not vulnerable
|
|
| utopic |
Not vulnerable
|
|