OpenSSL NULL Pointer Dereference Vulnerability (CVE-2009-1386)

Description

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

Remediation

References

CVE-2009-1386

Related Vulnerabilities

WordPress Plugin Elementor Addon Elements Cross-Site Request Forgery (1.6.3)

WordPress Plugin Duplicate Page Unspecified Vulnerability (3.5)

Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.4)

Moodle Improper Input Validation Vulnerability (CVE-2014-9060)

MySQL CVE-2021-2016 Vulnerability (CVE-2021-2016)

Severity

Medium

Classification

CVE-2009-1386 CWE-476