Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-9424
cve-2014-9424
double free vulnerability
ssl_parse_clienthello_use_srtp_ext
d1_srtp.c
libressl
denial of service
dtls handshake
nvd
7.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
74.6%
Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake.
Affected configurations
Node
openbsdlibresslRange≤2.1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| openbsd:libressl | openbsd libressl | le | 2.1.1 |
Related
nvd
nvd
CVE-2014-9424
2014-12-29 00:59:01
prion
prion
Double free
2014-12-29 00:59:00
cvelist
cvelist
CVE-2014-9424
2022-10-03 16:20:40
7.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
74.6%
Related for CVE-2014-9424