QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-1377

Back to search

CVE-2009-1377

Published: May 19, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

VendorProductVersions

n/a

n/a

affected
n/a

References

42724
third-party-advisory
x_refsource_SECUNIA
SSA:2010-060-02
vendor-advisory
x_refsource_SLACKWARE
38794
third-party-advisory
x_refsource_SECUNIA
ADV-2009-1377
vdb-entry
x_refsource_VUPEN
35729
third-party-advisory
x_refsource_SECUNIA
GLSA-200912-01
vendor-advisory
x_refsource_GENTOO
RHSA-2009:1335
vendor-advisory
x_refsource_REDHAT
HPSBMA02492
vendor-advisory
x_refsource_HP
38761
third-party-advisory
x_refsource_SECUNIA
37003
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:9663
vdb-entry
signature
x_refsource_OVAL
36533
third-party-advisory
x_refsource_SECUNIA
1022241
vdb-entry
x_refsource_SECTRACK
USN-792-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SR:2009:011
vendor-advisory
x_refsource_SUSE
35001
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:6683
vdb-entry
signature
x_refsource_OVAL
38834
third-party-advisory
x_refsource_SECUNIA
MDVSA-2009:120
vendor-advisory
x_refsource_MANDRIVA
35461
third-party-advisory
x_refsource_SECUNIA
35128
third-party-advisory
x_refsource_SECUNIA
35571
third-party-advisory
x_refsource_SECUNIA
35416
third-party-advisory
x_refsource_SECUNIA
SSRT100079
vendor-advisory
x_refsource_HP
42733
third-party-advisory
x_refsource_SECUNIA
ADV-2010-0528
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now