<i>CVE-2012-2110 is probably a better choice.</i><p>From the openssl advisory[0], &quot;In particular the SSL&#x2F;TLS code of OpenSSL is <i>not</i> affected.&quot;.<p>[0] - <a href="https:&#x2F;&#x2F;www.openssl.org&#x2F;news&#x2F;secadv&#x2F;20120419.txt" rel="nofollow">https:&#x2F;&#x2F;www.openssl.org&#x2F;news&#x2F;secadv&#x2F;20120419.txt</a>