CVE-2014-9424: OpenBSD Libressl

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a certain length-verification error during processing of a DTLS handshake.

Affected products

• OpenBSD Libressl: up to and including 2.1.1

Published 2014-12-29. Last modified 2026-06-17.