CVE-2014-8176

CVE-2014-8176 describes a memory corruption vulnerability in OpenSSL versions prior to 0.9.8za, 1.0.0m, and 1.0.1h, specifically within the dtls1_clear_queues function. This flaw allows remote DTLS peers to trigger a denial of service (application crash) and potentially other impacts by sending unexpected application data between ChangeCipherSpec and Finished messages. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.