Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1387
HistoryJun 04, 2009 - 4:30 p.m.

CVE-2009-1387

2009-06-0416:30:00
CWE-476
[email protected]
web.nvd.nist.gov
81
openssl
cve-2009-1387
security
denial of service
remote attackers
out-of-sequence
dtls
handshake
vulnerability

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.037 Low

EPSS

Percentile

91.7%

JSON

The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a โ€œfragment bug.โ€

References

Related

f5 2
ubuntucve 1
openssl 1
nessus 24
veracode 1
prion 1
seebug 1
debiancve 1
openvas 32
osv 1
ubuntu 1
securityvulns 4
debian 1
gentoo 1
altlinux 4
oraclelinux 1
centos 1
redhat 1
vmware 4
lenovo 2
f5
f5
K15348 : OpenSSL DTLS Buffer vulnerability CVE-2009-1387
2015-09-10 00:00:00
SOL15348 - OpenSSL DTLS Buffer vulnerability CVE-2009-1387
2014-06-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-1387
2009-06-04 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-1387
2009-02-05 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL DTLS Buffer vulnerability (SOL15348)
2014-10-10 00:00:00
SuSE 11 Security Update : OpenSSL (SAT Patch Number 990)
2009-09-24 00:00:00
OpenSSL 1.0.0 < 1.0.0-beta2 DoS
2012-01-04 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:42:01
prion
prion
Null pointer dereference
2009-06-04 16:30:00
seebug
seebug
OpenSSL dtls1_retrieve_buffered_fragment()ๅ‡ฝๆ•ฐๆกๆ‰‹ๆถˆๆฏๆ‹’็ปๆœๅŠกๆผๆดž
2009-06-22 00:00:00
debiancve
debiancve
CVE-2009-1387
2009-06-04 16:30:00
openvas
openvas
SLES11: Security update for OpenSSL
2009-10-11 00:00:00
SLES10: Security update for OpenSSL
2009-10-13 00:00:00
SLES10: Security update for OpenSSL
2009-10-13 00:00:00
osv
osv
openssl - cryptographic weakness
2009-09-15 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2009-06-25 00:00:00
securityvulns
securityvulns
[USN-792-1] OpenSSL vulnerabilities
2009-06-25 00:00:00
Multiple OpenSSL DoS conditions
2009-06-25 00:00:00
[security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux and Windows, Remote Cross Site Scripting &#40;XSS&#41;, Denial of Service &#40;DoS&#41;, Execution of Arbitrary Code, Unauthorized Access
2010-04-26 00:00:00
debian
debian
[SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures
2009-09-15 21:37:22
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2009-12-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8m-alt1
2010-02-26 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1
2010-02-26 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8m-alt1
2010-02-26 00:00:00
oraclelinux
oraclelinux
openssl security, bug fix, and enhancement update
2009-09-08 00:00:00
centos
centos
openssl security update
2009-09-15 18:42:01
redhat
redhat
(RHSA-2009:1335) Moderate: openssl security, bug fix, and enhancement update
2009-09-02 09:47:12
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
lenovo
lenovo
Intelยฎ PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intelยฎ PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.037 Low

EPSS

Percentile

91.7%

JSON
Related for CVE-2009-1387
f52ubuntucve1openssl1nessus24veracode1prion1seebug1debiancve1openvas32osv1ubuntu1securityvulns4debian1gentoo1altlinux4oraclelinux1centos1redhat1vmware4lenovo2