CVE-2009-1377
CVE-2009-1377
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."
EPSS 11.3% · Fix available
- Published
- Updated
Affected products and versions
Original sources
- http://secunia.com/advisories/42724
- http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest
- http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049
- http://secunia.com/advisories/38794
- http://lists.vmware.com/pipermail/security-announce/2010/000082.html
- http://www.vupen.com/english/advisories/2009/1377
- http://secunia.com/advisories/35729
- http://security.gentoo.org/glsa/glsa-200912-01.xml
- http://www.redhat.com/support/errata/RHSA-2009-1335.html
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
- http://secunia.com/advisories/38761
- http://secunia.com/advisories/37003
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663
- https://launchpad.net/bugs/cve/2009-1377
- http://secunia.com/advisories/36533
- http://www.securitytracker.com/id?1022241
- http://www.ubuntu.com/usn/USN-792-1
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
- http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html
- http://www.openwall.com/lists/oss-security/2009/05/18/1
- http://marc.info/?l=openssl-dev&m=124247675613888&w=2
- http://www.securityfocus.com/bid/35001
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683
- https://nvd.nist.gov/vuln/detail/CVE-2009-1377