CVE-2009-1378

Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to…

published May 19, 2009

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12746 · 96.3th percentile
Published
2009-05-19T19:00Z
EPSS history
Timeline
  • 19 MAY 19:00Z
    Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to…
    cvelistv5