Full title: OpenSSL DTLS Fragment Buffer Overflow DoS Exploit 
Category: dos / poc
Platform: multiple
This module performs a Denial of Service Attack against Datagram TLS in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h. This occurs when a DTLS ClientHello message has multiple fragments and the fragment lengths of later fragments are larger than that of the first, a buffer overflow occurs, causing a DoS.

# 0day.today @ http://0day.today/