CVE-2014-3512
Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.
Date published : 2014-08-13
http://www.securityfocus.com/bid/69083
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc