CVE-2009-1377

🗓️ 19 May 2009 19:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 125 Views🌐 WEB

The dtls1_buffer_record function in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue

Reporter	Title	Published	Views	Family All 151
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package openssl10 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package openssl10 version 0.9.8k-alt2	21 May 200900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8k-alt2	21 May 200900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl10 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl10 version 0.9.8k-alt2	21 May 200900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package openssl10 version 0.9.8k-alt2	21 May 200900:00	–	altlinux
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the integrity and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : openssl (CESA-2009:1335)	6 Jan 201000:00	–	nessus

NVD

Node

openssl opensslRange0.9.8–0.9.8m

Source	Link
openwall	www.openwall.com/lists/oss-security/2009/05/18/1
vupen	www.vupen.com/english/advisories/2009/1377
mandriva	www.mandriva.com/security/advisories
sourceforge	www.sourceforge.net/mailarchive/message.php
cvs	www.cvs.openssl.org/chngview
lists	www.lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
securitytracker	www.securitytracker.com/id
h20000	www.h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
security	www.security.gentoo.org/glsa/glsa-200912-01.xml
secunia	www.secunia.com/advisories/42724

Parameter	Position	Path	Description	CWE
cn=18187	path	cvs.openssl.org/chngview?cn=18187	CVS patch view link for OpenSSL DTLS record buffer limitation bug (CVE-2009-1377)	CWE-119
cn=18188	path	cvs.openssl.org/chngview?cn=18188	CVS patch view link for OpenSSL DTLS record buffer limitation bug (CVE-2009-1377)	CWE-119

16 Jun 2026 23:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

EPSS0.11274

CWE-119