CVE-2016-2181

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.1.0

Description The issue is related to the Anti-Replay feature in the DTLS implementation, which mishandles early use of a new epoch number in conjunction with a large sequence number. This allows remote attackers to cause a denial of service via spoofed DTLS records. The vulnerability is related to the files rec layer d1.c and ssl3 record.c.

Recommendations For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DTLS implementation until a patch is available.