CVE-2015-0290

CVE-2015-0290 affects OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 with AES-NI; the multiblock SSL write path in s3_pkt.c can cause pointer corruption/DoS in non-blocking I/O. IBM IBM i/DataPower and related SBs document concrete remediation paths (update to fixed OpenSSL versions; e.g., patches lis...