CVE-2014-3567

EPSS 26.5%

openssl - security update

Published: 10/19/2014Modified: 4/28/2026

Also known as:DEBIAN-CVE-2014-3567

Description

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Affected packages (2)

Debian/opensslfrom 0, < 1.0.1j-1
Debian/opensslfrom 0, < 0.9.8o-4squeeze18

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3567