2 matches found
Null pointer dereference
The ssl3takemac function in ssl/s3both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service NULL pointer dereference and application crash via a crafted Next Protocol Negotiation record in a TLS handshake...
4.3CVSS6.8AI score0.11851EPSS
SaveExploits0References16Affected Software1
PT-2014-1884
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1f Gentoo Linux affected versions not specified Description The issue allows remote TLS servers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted Next...
4.3CVSS0.11851EPSS
SaveExploits0References182
20