CVE-2014-3513

EPSS 35.7%

openssl - security update

Published: 10/19/2014Modified: 4/28/2026

Description

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Affected packages (2)

Debian/opensslfrom 0, < 1.0.1j-1
Debian/opensslfrom 0, < 1.0.1e-2+deb7u13

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3513