Your submission was sent successfully! Close

CVE-2009-1377

Published: 19 May 2009

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

Priority

Medium

Status

Package Release Status
openssl
Launchpad, Ubuntu, Debian
dapper
Released (0.9.8a-7ubuntu0.9)
hardy
Released (0.9.8g-4ubuntu3.7)
intrepid
Released (0.9.8g-10.1ubuntu2.4)
jaunty
Released (0.9.8g-15ubuntu3.2)
upstream Needs triage