Openssl · Openssl · CVE-2015-1794
**Name of the Vulnerable Software and Affected Versions**
OpenSSL versions prior to 1.0.2e
**Description**
The issue allows remote servers to cause a denial of service, resulting in a segmentation fault, by sending an anonymous Diffie-Hellman (DH) ServerKeyExchange message with a zero p value. This is due to a problem in the `ssl3 get key exchange` function.
**Recommendations**
For versions prior to 1.0.2e, update to version 1.0.2e or later to resolve the issue. As a temporary workaround, consider restricting the use of anonymous Diffie-Hellman ciphers to minimize the risk of exploitation.