This version of OpenSSL predates the infamous (CVE-2014-0160), but it is still woefully outdated. If you must use this stack, never rely on its SSL/TLS implementation for real-world security.