Description

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

Remediation

References

CVE-2009-1377

Related Vulnerabilities

PHP Use After Free Vulnerability (CVE-2017-12932)

Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-2097)

concrete5 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-5107)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2203)

Moodle Improper Authorization Vulnerability (CVE-2019-14828)

Severity

Medium

Classification

CVE-2009-1377 CWE-119

Tags

Missing Update Known Vulnerabilities