CVE-2014-9424

2014-12-2900:00:00

mitre

www.cve.org

cve-2014-9424

ssl_parse_clienthello_use_srtp_ext

denial of service

length-verification error

dtls handshake

AI Score

7.5

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON

Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake.