A vulnerability has been reported in OpenSSL, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to certain applications (e.g. Apache with the PHP module) calling OpenSSL's "CRYPTO_free_all_ex_data()" function prematurely. In certain cases, this can result in memory leaks, which can be exploited to e.g. cause a DoS due to memory exhaustion.

This is related to vulnerability #6 in:
SA28046

Solution
Update to version 0.9.8m.

Provided and/or discovered by
Reported by an rPath customer.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://cvs.openssl.org/chngview?cn=19068
http://cvs.openssl.org/chngview?cn=19069
https://issues.rpath.com/browse/RPL-3157
https://bugzilla.redhat.com/show_bug.cgi?id=546707

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers