vulnerability
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
HighCVSS 8.2
Summary
The vulnerability affects various OpenSSL versions, including 3.0, 1.1.1, and 1.0.2. While exploitation hasn't been reported, CISA assigned a CVSS score of 8.2, and Ubuntu noted a potential for incorrect handshake behavior or denial of service. Updates are available for OpenSSL 4.0, 3.6, 3.5, and 3.4.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data