diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-05-10 14:33:11 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-05-10 14:33:11 +0000 |
| commit | 36dd4cba3dfa87aebd59d10c844fdda3a31b89db (patch) | |
| tree | 2d1edd5b93a10cc5241b95ac4b1a5845449d299d /CHANGES | |
| parent | 3978429ad5a07907eae59ff9d20fba117208ef23 (diff) | |
Sanity check record length before skipping explicit IV in DTLS
to fix DoS attack.
Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic
fuzzing as a service testing platform.
(CVE-2012-2333)
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -4,6 +4,14 @@ Changes between 0.9.8w and 0.9.8x [xx XXX xxxx] + *) Sanity check record length before skipping explicit IV in DTLS + to fix DoS attack. + + Thanks to Codenomicon for discovering this issue using Fuzz-o-Matic + fuzzing as a service testing platform. + (CVE-2012-2333) + [Steve Henson] + *) Initialise tkeylen properly when encrypting CMS messages. Thanks to Solar Designer of Openwall for reporting this issue. [Steve Henson] |