---
title: "CVE-2009-1379\n | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2009-1379?format=md
keywords: index, follow
---
# CVE-2009-1379
Publication date 19 May 2009
Last updated 24 July 2024
---
Ubuntu priority
**Medium**
[Why this priority?](https://ubuntu.com/security/cves/about#priority )
Toggle side navigation
## Description
Use-after-free vulnerability in the dtls1\_retrieve\_buffered\_fragment
function in ssl/d1\_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers
to cause a denial of service (openssl s\_client crash) and possibly have
unspecified other impact via a DTLS packet, as demonstrated by a packet
from a server that uses a crafted server certificate.
[Read the notes from the security team](https://ubuntu.com/security/CVE-2009-1379?format=md#notes)
## Status
Show unmaintained releases
| Package | Ubuntu Release | Status |
| --- | --- | --- |
| openssl | 9.04 jaunty | Fixed 0.9.8g-15ubuntu3.2 |
| 8.10 intrepid | Fixed 0.9.8g-10.1ubuntu2.4 |
| 8.04 LTS hardy | Fixed 0.9.8g-4ubuntu3.7 |
| 6.06 LTS dapper | Fixed 0.9.8a-7ubuntu0.9 |
---
* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)
## Notes
---
### [mdeslaur](https://launchpad.net/~mdeslaur)
PoC: http://marc.info/?l=openssl-dev&m=124202891602690&w=2
## References
* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2009-1379)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2009-1379)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2009-1379)
### Related Ubuntu Security Notices (USN)
+ [USN-792-1](https://usn.ubuntu.com/USN-792-1)
+ OpenSSL vulnerabilities
+ 25 June 2009
### Other references
*
*