This host has OpenSSL installed and is prone to Denial of Service vulnerability.

Successful exploitation will allow attacker to cause DTLS server crash. Impact Level: Application Impact Level: Application

Upgrade to OpenSSL version 0.9.8i or later http://www.openssl.org/source ***** Note: Vulnerability is related to CVE-2009-1386 ***** ***** This might be a False Positive Only version check is being done depending on the publicly available OpenSSL packages. Each vendor might have backported versions of the packages. *****

A NULL pointer dereference error in ssl/s3_pkt.c file which does not properly check the input packets value via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

OpenSSL version prior to 0.9.8i on Linux.

• http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest
• http://www.openwall.com/lists/oss-security/2009/06/02/1

---

Updated on 2017-03-28