CVE-2015-0207

The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows…

published March 19, 2015

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06483 · 93.7th percentile
Published
2015-03-19T00:00Z
EPSS history
Timeline
  • 19 MAR 00:00Z
    The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows…
    cvelistv5