OpenSSL patches high-severity DTLS flaw leaking heap memory
OpenSSL released fixes on September 29 for a high-severity flaw in DTLS, the TLS variant used for UDP traffic. A handshake message resend that starts while a larger message is stuck part-way can leak heap memory unencrypted or crash the program.
- High-severity flaw affects DTLS, the TLS variant for UDP traffic
- Handshake resend during a stuck larger message leaks heap memory
- Leaked data is sent unencrypted or the program crashes
- Fixes were released on September 29
Read next
Security