Unrated severityNVD Advisory· Published Dec 29, 2014· Updated Jun 17, 2026

CVE-2014-9424

Description

Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake.

Affected products

OpenBSD/Libressl
cpe:2.3:a:openbsd:libressl:*:*:*:*:*:*:*:*
Range: <=2.1.1
LibreSSL/LibreSSLllm-create
Range: <2.1.2

Patches

Vulnerability mechanics

References

code.google.com/p/google-security-research/issues/detailnvd
github.com/robertbachmann/openbsd-libssl/commit/62a110d447bb8c16a4c69629e28a42e8c39fd7e0nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000