5

CVE-2009-1377

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OpenSSL ≫ OpenSSL Version >= 0.9.8 < 0.9.8m
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.27% 0.954
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
Third Party Advisory
Broken Link
http://secunia.com/advisories/38761
Third Party Advisory
http://secunia.com/advisories/42724
Third Party Advisory
http://secunia.com/advisories/42733
Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049
Third Party Advisory
Mailing List
https://kb.bluecoat.com/index?page=content&id=SA50
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
Third Party Advisory
http://secunia.com/advisories/35416
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
Third Party Advisory
http://secunia.com/advisories/38794
Third Party Advisory
http://www.vupen.com/english/advisories/2010/0528
Third Party Advisory
Permissions Required
http://secunia.com/advisories/35729
Third Party Advisory
http://secunia.com/advisories/36533
Third Party Advisory
http://secunia.com/advisories/38834
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1335.html
Third Party Advisory
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc
Third Party Advisory
Broken Link
http://cvs.openssl.org/chngview?cn=18187
Patch
Third Party Advisory
Broken Link
http://marc.info/?l=openssl-dev&m=124247675613888&w=2
Patch
Third Party Advisory
Mailing List
http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest
Patch
Third Party Advisory
Broken Link
Mailing List
http://secunia.com/advisories/35128
Third Party Advisory
Vendor Advisory
http://secunia.com/advisories/35461
Third Party Advisory
http://secunia.com/advisories/35571
Third Party Advisory
http://secunia.com/advisories/37003
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200912-01.xml
Third Party Advisory
http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net
Broken Link
http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:120
Broken Link
http://www.openwall.com/lists/oss-security/2009/05/18/1
Mailing List
http://www.securityfocus.com/bid/35001
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022241
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-792-1
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1377
Third Party Advisory
Permissions Required
https://launchpad.net/bugs/cve/2009-1377
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683
Tool Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663
Tool Signature