Some vulnerabilities have been reported in OpenSSL, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) The library does not limit the number of buffered DTLS records with a future epoch. This can be exploited to exhaust all available memory via specially crafted DTLS packets.

2) An error when processing DTLS messages can be exploited to exhaust all available memory by sending a large number of out of sequence handshake messages.

3) A use-after-free error in the "dtls1_retrieve_buffered_fragment()" function can be exploited to cause a crash in a client context.

4) An error in the "dtls1_process_out_of_seq_message()" function can be exploited to crash a DTLS server via a specially crafted out of sequence DTLS packet.

Solution
Update to version 0.9.8m.

Provided and/or discovered by
1-3) Daniel Mentz
4) Robin Seggelmann

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest
http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest
http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest
http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest

Deep Links
Links available to Secunia VIM customers