CVE-2013-6450

Source
https://nvd.nist.gov/vuln/detail/CVE-2013-6450
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-6450.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2013-6450
Downstream
Related
Published
2014-01-01T16:05:15Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1both.c and ssl/t1enc.c.

References

Affected packages