PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2015-0206

CVE-2015-0206

openssl: DTLS memory leak in dtls1_buffer_record

Loading…

Severity

Moderate

Red Hat Product Security

5

CVSS 2.0

Review impact separately from score.

Published · January 8, 2015

Updated · August 5, 2026

Description

A memory leak flaw was found in the way the dtls1_buffer_record() function of OpenSSL parsed certain DTLS messages. A remote attacker could send multiple specially crafted DTLS messages to exhaust all available memory of a DTLS server.

Statement

This issue does not affect the version of openssl and openssl097a as shipped with Red Hat Enterprise Linux 5. This issue does not affect the version of openssl098e as shipped with Red Hat Enterprise Linux 6 and 7.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-401 · Missing Release of Memory after Effective Lifetime