CVE-2009-1377

Опубликовано: 19 мая 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

Ссылки

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc
Broken Link
Third Party Advisory
http://cvs.openssl.org/chngview?cn=18187
Broken Link
Patch
Third Party Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
Broken Link
Third Party Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
Broken Link
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
Third Party Advisory
http://marc.info/?l=openssl-dev&m=124247675613888&w=2
Mailing List
Patch
Third Party Advisory
http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest
Broken Link
Mailing List
Patch
Third Party Advisory
http://secunia.com/advisories/35128
Third Party Advisory
Vendor Advisory
http://secunia.com/advisories/35416
Third Party Advisory
http://secunia.com/advisories/35461
Third Party Advisory
http://secunia.com/advisories/35571
Third Party Advisory
http://secunia.com/advisories/35729
Third Party Advisory
http://secunia.com/advisories/36533
Third Party Advisory
http://secunia.com/advisories/37003
Third Party Advisory
http://secunia.com/advisories/38761
Third Party Advisory
http://secunia.com/advisories/38794
Third Party Advisory
http://secunia.com/advisories/38834
Third Party Advisory
http://secunia.com/advisories/42724
Third Party Advisory
http://secunia.com/advisories/42733
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*

Версия от 0.9.8 (включая) до 0.9.8m (исключая)

EPSS

Процентиль: 89%

0.04437

Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2009-1377

ubuntu

около 16 лет назад

CVE-2009-1377

redhat

около 16 лет назад

CVE-2009-1377

debian

около 16 лет назад

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and ...

GHSA-26xx-j6q3-j3rf

github

около 3 лет назад

BDU:2015-09404

fstec

больше 15 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить целостность и доступность защищаемой информации

EPSS

Процентиль: 89%

0.04437

Низкий

5 Medium

CVSS2

Дефекты

CWE-119