A bug in DTLS will not get attention because people don't run DTLS.

2trill2spill · on Jan 22, 2016

Yea probably a poor choice of a OpenSSL vulnerability, I was assuming this was on by default even when using TLS like lot's of other OpenSSL features but then I found this line, "Only applications using OpenSSL as a DTLS client are affected."[1]

CVE-2012-2110 is probably a better choice.

[1]: https://www.openssl.org/news/secadv/20140605.txt

dsp1234 · on Jan 22, 2016

CVE-2012-2110 is probably a better choice.

From the openssl advisory[0], "In particular the SSL/TLS code of OpenSSL is not affected.".

[0] - https://www.openssl.org/news/secadv/20120419.txt