ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t 1.0.1 before 1.0.1p and 1.0.2 before 1.0.2d when used for a multi-threaded client writes the PSK identity hint to an incorrect data structure which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.