NVD

Id
48663  
Name
CVE-2009-1378  
Description
Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-05-19  
Modified Date
2013-01-22  
Seq
2009-1378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245694 48663 CVE-2009-1378 NetBSD-SA2009-009  View
245695 48663 CVE-2009-1378 http://cvs.openssl.org/chngview?cn=18188  View
245696 48663 CVE-2009-1378 SSRT100079  View
245697 48663 CVE-2009-1378 SUSE-SR:2009:011  View
245698 48663 CVE-2009-1378 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
245699 48663 CVE-2009-1378 [openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak  View
245700 48663 CVE-2009-1378 [openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak  View
245701 48663 CVE-2009-1378 oval:org.mitre.oval:def:11309  View
245702 48663 CVE-2009-1378 oval:org.mitre.oval:def:7229  View
245703 48663 CVE-2009-1378 http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest  View
245704 48663 CVE-2009-1378 GLSA-200912-01  View
245705 48663 CVE-2009-1378 SSA:2010-060-02  View
245706 48663 CVE-2009-1378 http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net  View
245707 48663 CVE-2009-1378 http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html  View
245708 48663 CVE-2009-1378 MDVSA-2009:120  View
245709 48663 CVE-2009-1378 8720  View
245710 48663 CVE-2009-1378 [oss-security] 20090518 Two OpenSSL DTLS remote DoS  View
245711 48663 CVE-2009-1378 RHSA-2009:1335  View
245712 48663 CVE-2009-1378 35001  View
245713 48663 CVE-2009-1378 1022241  View
245714 48663 CVE-2009-1378 USN-792-1  View
245715 48663 CVE-2009-1378 ADV-2009-1377  View
245716 48663 CVE-2009-1378 ADV-2010-0528  View
245717 48663 CVE-2009-1378 https://kb.bluecoat.com/index?page=content&id=SA50  View
245718 48663 CVE-2009-1378 https://launchpad.net/bugs/cve/2009-1378  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40867 JVNDB-2009-001873 OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の dtls1_process_out_of_seq_message 関数には、DTLS レコードの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1378 38809 CVE-2009-1378 48663 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001873.html 2009-05-19 2010-03-12 View