CVE-2014-0221
4.3
CVSS v2.0 Base Score
82.10%
HIGH RiskEPSS (99th percentile)
NVD-CWE-noinfo
The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.
Published: 6/5/2014
Modified: 5/6/2026
Vulnerability Summary
CVSS v2 Score
4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS Score (Exploitation Probability)
82.10%HIGH Exploitation Risk
99th percentile
This vulnerability has a 82.10% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-noinfo