@mattcaswell as the test done by us, the "dheater" can make our openssl s_server Occupy 90% +CPU,is this normal？

For reference see this issue which seems relevant:
mozilla/ssl-config-generator#162

Also see:
https://github.com/Balasys/dheater

The CVE record links to this academic paper (which dates from 2000) - in particular see section 5.7:
https://www.researchgate.net/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol

This probably requires some OTC consideration. My initial reaction is that there doesn't seem to be anything new here - other than the assignment of a CVE. (Although I'm a little confused by the "2002" year in the CVE number, even though this was only recently assigned).

Question for OTC: How should we respond to CVE-2002-20001?

I didn't see anything in the paper to suggest that the DoS issue is specifically related to DHE and not ECDHE. Did I miss something?

OTC: We will not change the default cipher list at this time.

OTC: We will not change the default cipher list at this time.
Is This mean that this CVE isn't a Vulnerability

We do not consider this to be a vulnerability in OpenSSL.

@mattcaswell jfyi many of the CVE CNAs will assign a CVE number where the year portion represents the earliest known public discussion of an issue.