{"action":"opened","issue":{"url":"https://api.github.com/repos/dweinstein/cve/issues/118","labels_url":"https://api.github.com/repos/dweinstein/cve/issues/118/labels{/name}","comments_url":"https://api.github.com/repos/dweinstein/cve/issues/118/comments","events_url":"https://api.github.com/repos/dweinstein/cve/issues/118/events","html_url":"https://github.com/dweinstein/cve/issues/118","id":88621190,"number":118,"title":"CVE-2014-8176 (openssl)","user":{"login":"cve-bot","id":12750611,"avatar_url":"https://avatars.githubusercontent.com/u/12750611?v=3","gravatar_id":"","url":"https://api.github.com/users/cve-bot","html_url":"https://github.com/cve-bot","followers_url":"https://api.github.com/users/cve-bot/followers","following_url":"https://api.github.com/users/cve-bot/following{/other_user}","gists_url":"https://api.github.com/users/cve-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/cve-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cve-bot/subscriptions","organizations_url":"https://api.github.com/users/cve-bot/orgs","repos_url":"https://api.github.com/users/cve-bot/repos","events_url":"https://api.github.com/users/cve-bot/events{/privacy}","received_events_url":"https://api.github.com/users/cve-bot/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/dweinstein/cve/labels/Official","name":"Official","color":"bfd4f2"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-16T05:18:58Z","updated_at":"2015-06-16T05:18:58Z","closed_at":null,"body":"[CVE-2014-8176 (openssl)](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8176)\nThe dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.\n"}}