View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-0221 severity moderate: SUSE including 241 source package names (compat-openssl098, libmysqlclient-devel-10.0.16-15.1, …), 567 product×package rows across 71 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (71 product lines)): Fixed 373, Known Not Affected 194.
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.