NVD

Id
48662  
Name
CVE-2009-1377  
Description
The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-05-19  
Modified Date
2013-01-22  
Seq
2009-1377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245671 48662 CVE-2009-1377 NetBSD-SA2009-009  View
245672 48662 CVE-2009-1377 http://cvs.openssl.org/chngview?cn=18187  View
245673 48662 CVE-2009-1377 HPSBMA02492  View
245674 48662 CVE-2009-1377 SUSE-SR:2009:011  View
245675 48662 CVE-2009-1377 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
245676 48662 CVE-2009-1377 [openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug  View
245677 48662 CVE-2009-1377 oval:org.mitre.oval:def:6683  View
245678 48662 CVE-2009-1377 oval:org.mitre.oval:def:9663  View
245679 48662 CVE-2009-1377 http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest  View
245680 48662 CVE-2009-1377 GLSA-200912-01  View
245681 48662 CVE-2009-1377 SSA:2010-060-02  View
245682 48662 CVE-2009-1377 http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net  View
245683 48662 CVE-2009-1377 http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html  View
245684 48662 CVE-2009-1377 MDVSA-2009:120  View
245685 48662 CVE-2009-1377 [oss-security] 20090518 Two OpenSSL DTLS remote DoS  View
245686 48662 CVE-2009-1377 RHSA-2009:1335  View
245687 48662 CVE-2009-1377 35001  View
245688 48662 CVE-2009-1377 1022241  View
245689 48662 CVE-2009-1377 USN-792-1  View
245690 48662 CVE-2009-1377 ADV-2009-1377  View
245691 48662 CVE-2009-1377 ADV-2010-0528  View
245692 48662 CVE-2009-1377 https://kb.bluecoat.com/index?page=content&id=SA50  View
245693 48662 CVE-2009-1377 https://launchpad.net/bugs/cve/2009-1377  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40866 JVNDB-2009-001872 OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の dtls1_buffer_record 関数には、DTLS レコードの epoch に関する処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1377 38808 CVE-2009-1377 48662 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001872.html 2009-05-19 2010-03-12 View