The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in the ssl3sendclientkeyexchange function of s3clnt.c for OpenSSL allows remote DTLS servers to trigger a service failure such as swapping the null pointer and terminating the application abnormally by using a specially crafted handshake message together with an anonymous DH or...

openssl: client-side denial of service when using anonymous ECDH

The ssl3sendclientkeyexchange function in s3clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service NULL pointer dereference and client crash by triggering a NULL certificate...