CVE-2012-2110 is probably a better choice. From the openssl advisory[0], "In particular the SSL/TLS code of OpenSSL is not affected.". [0] - https://www.opens

CVE-2012-2110 is probably a better choice. From the openssl advisory[0], "In particular the SSL/TLS code of OpenSSL is not affected.". [0] - https://www.openssl.org/news/secadv/20120419.txt https://www.openssl.org/news/secadv/20120419.txt