OpenSSL security advisory affecting FreeSWITCH users.
16 Oct
2014
16 Oct
'14
12:12 a.m.
Please be aware of the following OpenSSL advisory from today. The FreeSWITCH team recommends all users upgrade to openssl 1.0.1j as soon as possible: "A flaw in the DTLS SRTP extension parsing code allows an attacker, who sends a carefully crafted handshake message, to cause OpenSSL to fail to free up to 64k of memory causing a memory leak. This could be exploited in a Denial Of Service attack. This issue affects OpenSSL 1.0.1 server implementations for both SSL/TLS and DTLS regardless of whether SRTP is used or configured. Implementations of OpenSSL that have been compiled with OPENSSL_NO_SRTP defined are not affected.” https://www.openssl.org/news/secadv_20141015.txt
4403
Age (days ago)
4403
Last active (days ago)
0 comments
1 participants
participants (1)
-
Michael Jerris