Description

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

Remediation

References

CVE-2009-1377

Related Vulnerabilities

MediaWiki Other Vulnerability (CVE-2004-2187)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.19)

WordPress Plugin Events Manager Cross-Site Scripting (5.8.1.1)

Apache Tomcat Other Vulnerability (CVE-2002-2009)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1629)

Severity

Medium

Classification

CVE-2009-1377 CWE-119

Tags

Missing Update Known Vulnerabilities