Vulnerable Systems:
* OpenSSL Project OpenSSL 1.0.2 and prior
An attacker can exploit this vulnerability to crash an application which uses the library, effectively denying service to legitimate users. Given the nature of this issue attackers may also be able to run arbitrary code, but this has not been confirmed.
Vendor Status:
OpenSSL as issued an update for this vulnerablity.