CVE-2014-3571

Name	CVE-2014-3571
Description	OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-132-1, DSA-3125-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openssl (PTS)	buster	1.1.1n-0+deb10u3	fixed
	buster (security)	1.1.1n-0+deb10u6	fixed
	bullseye	1.1.1w-0+deb11u1	fixed
	bullseye (security)	1.1.1n-0+deb11u5	fixed
	bookworm, bookworm (security)	3.0.11-1~deb12u2	fixed
	trixie	3.1.5-1	fixed
	sid	3.2.1-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
openssl	source	squeeze	0.9.8o-4squeeze19	DLA-132-1
openssl	source	wheezy	1.0.1e-2+deb7u14	DSA-3125-1
openssl	source	(unstable)	1.0.1k-1

Notes

https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=8d7aab986b499f34d9e1bc58fbfd77f05c38116e
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=45fe66b8ba026186aa5d8ef1e0e6010ea74d5c0b